What Makes a Good Foothold in AWS?

An AWS security assessment is only as useful as the foothold it starts from. Pick the wrong starting identity and you get a graph of paths nobody would ever walk. Pick the right one and you get the breach an attacker would actually run. Here's what to look for.