Ensure no Customer Managed IAM policies allow actions that may lead into Privilege Escalation