Before reading this article, I recommend familiarizing yourself with elevated roles and directed actions. These are relatively new capabilities, and understanding how they work will make the following discussion easier to follow. I considered including an explanation of elevated roles here, but...
Source: [Dev.to](https://dev.to/aws-builders/testing-aws-devops-agent-security-directed-actions-guardrails-and-cloudtrail-evidence-338i)