Work in Progress
User Data Script Persistence
Maintain access to an EC2 instance and it's IAM role via user data scripts.
AWS Consoler
Leverage stolen credentials to use the AWS Console.
Role Chain Juggling
Keep your access by chaining assume-role calls.