Privilege Escalation in EC2, using Session Manager

A companion to my blog post on permissions misconfigurations and how ssm:StartSession and similar AWS APIs can be abused to traverse across your network or escalate privileges.