Impressive tool, but the supporting documentation is what I appreciate most. I think the prevention guide could be improved by providing an example service con

Impressive tool, but the supporting documentation is what I appreciate most. I think the prevention guide could be improved by providing an example service control policy that blocks known dangerous IAM actions like ecr:SetRepositoryPolicy for all but a specific security principal.