aquaveo/stable: links for aws-priviledge-deescalation