Introducing Pathfinding.cloud

Datadog Security Labs introduced pathfinding.cloud, an open-source, machine-readable library cataloging 60+ AWS IAM privilege escalation paths with prerequisites, exploitation steps, remediation guidance, and explicit tool coverage mapping. It standardizes paths into categories (self-escalation, principal access, new/existing PassRole, credential access), exposes major detection gaps in popular tools (42% of 65 paths undetected), and provides unique IDs, YAML schema, and JSON exports so security teams, tool builders, and researchers can discover, test, and close AWS privilege escalation exposures.