Links for bapp-aws-priviledge-deescalation