Another day of pretending to understand IAM
@pikesley it’s fine, no one understands IAM. I’m convinced even the people who implemented it for Google/AWS write their policies by endlessly updating policies until something works.