Since the beginning, writing IAM policies with the minimum necessary permissions has been hard. Some services don't have resource-level permissions (you have to grant to *), but then later they do. When a service has resource-level permissions, it may only be for some of its permissions (the rest still need *). Some services have their … Continue reading Securing IAM Policies →