I’ll give it a try. Thanks! > Can you explain how IAM doesn’t work well with the “starting closed” approach? It works ok once you do a lot of learning and re

I’ll give it a try. Thanks! > Can you explain how IAM doesn’t work well with the “starting closed” approach? It works ok once you do a lot of learning and read the best practices. I think a lot of people will skip that and use their root account for everything. The biggest mistake I made was creating an admin user, but giving it too many permissions and using it like a normal user. After learning more I use the root account to make an admin account, but I think the admin account should only use IAM to create other fine grained users. So it works fine, but I think it would be better to force people into creating those first couple of accounts with permissions chosen by experts. It’s too easy to jump right in and start using an over privileged account.