CloudFormation can become an attack path when execution roles have more permissions than the user invoking them.
On Sept. 15 (English) and Sept. 17 (Spanish), Samanta Aranda walks through real privilege escalation and persistence techniques using misconfigured CloudFormation execution roles.
