feat(queries): add new aws iam privilege escalation queries

[gafnit-lightspin]

Closes #

Proposed Changes

• Added several new KICS queries for AWS IAM privilege escalation

I submit this contribution under the Apache-2.0 license.

[kicsbot]

Scan submitted to Checkmarx

[kicsbot]

Checkmarx SAST - Scan Summary & Details

Cx-SAST Summary

Total of 5 vulnerabilities
 0 High
 0 Medium
 5 Low
 0 Info

Violation Summary

No policy violation found

[rafaela-soares]

Hi, @gafnit-lightspin!

Thank you so much for such an amazing contribution 🚀

I have a few suggestions. Let me know if you need any help 😊

[rjegoncalves]

Hi @gafnit-lightspin,

Thank you for the great contributions!

We did a review of the list of proposed queries and since the comments are the same for all the queries, we summarize them here:

• Category and Severity are adequate. The list of queries belongs to the context of IAM privilege escalation, which fits inside the Access Control category. As for the Severity, regardless of their different type in the likelihood of exploitation, the outcome will be the same, privilege escalation.
• The Descriptions can be improved to also consider why such permission creates a security issue and that (in this case) it can lead to a privilege escalation. The reference [1] can help better understand and define a more suited approach.
• The Descriptions URL should point to the respective affected endpoints (the affected policy).

[1] AWS IAM Privilege Escalation – Methods and Mitigation

[rafaela-soares]

LGTM 🚀

Thank you so much for such an amazing contribution, @gafnit!