>IAM is a rabbit hole, now later VPC restrictions on top My idea is to build simpler system on top of cloud networking and IAM/permissions. Why would I want t

>IAM is a rabbit hole, now later VPC restrictions on top My idea is to build simpler system on top of cloud networking and IAM/permissions. Why would I want to have networking between components that are permissioned to interact with each other, and the other way, why some app/lambda's service account have permission to interact with particular database, but be blacklisted on firewall? Have GUI on top to drag and drop "routes" between apps. Of course, make it optional etc, but I think it would save tons of devops time for smaller organisations without audit requirements unlike fintechs, medical stuff etc.