nuwa/stage: links for aws-priviledge-deescalation