Detecting privilege escalations in code including cross-service calls

摘要: Systems and methods are described for conducting static analysis of code invoking network-based services to identify, without requiring execution the code, security issues that may be introduced due invocations services. A system is provided analyze detect both direct services, as well indirect caused by invocations. The can compare permissions information directly or indirectly invoked identify instances in which calls not permitted information. In some instances, traverse a “call graph” all either errors through multiple levels indirection.