Terraform IAM Privesc Companion

A single overly-permissive statement (this catalog's own Terraform IAM Wildcard Companion) is one thing; a genuine multi-hop privilege- escalation path across several roles is a different, more dangerous finding entirely (CWE-269) -- the same technique Rhino Security Labs' well-known IAM privilege-escalation research and the IAM-Vulnerable benchmark document. PMapper builds that role-to-role graph by querying a live, already-deployed AWS account (via boto3); Cloudsplaining can also scan a single policy file offline and flags known escalation methods in it, but it does not build a role-to-role graph. Both are CLI tools -- neither is an IDE inspection that follows escalation paths across roles in IaC source, before terraform apply ever runs. No dedicated Marketplace plugin found for this exact angle.