In the cloud, lateral movement is an API call, not an exploit

Most of us learned attack paths on a network. Someone lands on a box, escalates locally, then pivots...