https://stories.rdok.co.uk/posts/least-priveleges-for-iam-policies/