Review IAM policies, roles, and permission boundaries for least-privilege violations, dangerous wildcards, privilege escalation paths, and public-access misconfigurations. Triggers on "review my IAM policy", "is this role too permissive", "IAM least privilege audit", "check for dangerous permissions", "wildcard in IAM", "can this role escalate privileges".
