But the interesting thing about the S3 read bug, because AWS blocks support from reading S3 data on the control plane level, even though the IAM permission had

But the interesting thing about the S3 read bug, because AWS blocks support from reading S3 data on the control plane level, even though the IAM permission had read permissions support COULD NOT read any customer data. https://aws.amazon.com/security/security-bulletins/AWS-2021-007/ https://aws.amazon.com/security/security-bulletins/AWS-2021-... This is that kind of example, even with a total possible failure here, even AWS support staff still couldn't actually do anything. The transparency is very high on AWS. All S3 access is logged, the policies for the support role are public (does Azure provide this) and all changes to polices are logged.