IAM-Deescalate

IAM-Deescalate is a security tool designed to mitigate privilege escalation risks within AWS identity and access management (IAM) by identifying IAM users and roles susceptible to escalation. It utilizes NCC Group's PMapper to model relationships in an AWS account and provides commands to audit risks, plan remediation, apply policies, and revert changes. Notable features include the ability to dynamically manage inline policies and the use of explicit denies to break risky permissions paths between non-administrative and administrative principals.