coates’s Twitter Archive—№ 21,001

grhmc It’s a bit hit-and-miss, but there’s an IAM policy simulator to at least help sort that part out. I’ve had mixed luck with it. Cloudtrail might also have a clue…