You also can have the opposite problem where devs have no oversight and there are wide open security groups and IAM roles shared between like 30 lambdas and cha

You also can have the opposite problem where devs have no oversight and there are wide open security groups and IAM roles shared between like 30 lambdas and changing one thing with one of them causes everything to come toppling down like a house of cards because handing that much autonomy to someone who doesn't fully understand (or care about) the underlying infrastructure is like giving a drunk toddler a bucket of hand grenades.