Iam
- Stop copying AWS managed policies — deny what you don't want instead
- The IAM policy controls access — the document controls how people feel about it
- IAM trust policies silently accept wildcards in principals — and silently deny everything
- IAM eventual consistency is 4 seconds — if your policy still doesn't work, you have a bug
- The Over-Mighty Subject: why your site repos have too much power