Over the past year and a half I have been able to get to know Amazon Web Services (AWS) through the eyes of an attacker. Red teaming AWS accounts has become both a learning experience as well as a deep dive into the Identity and Access Management (IAM) aspects of AWS. AWS IAM is an awesome tool that can help make your account and instances more secure. However, when used without granularity and thought the use of IAM instance profiles can lead to a full AWS account compromise. This talk will focus on the offensive side of IAM hacking and show how AWS instances with bad IAM roles can lead to a full AWS account takeover. I'll go over some of the good, bad and ugly things that can be done with AWS IAM and demonstrate a full AWS account takeover through overly permissive AWS IAM permissions.