Todays “fun” is brought to you by AWS. Because nothing says fun like playing IAM Policy whack-a-mole.