I find the project-based permission model a lot easier to work with than the ARN based permission model. ARN is more granular so probably more secure if you get

I find the project-based permission model a lot easier to work with than the ARN based permission model. ARN is more granular so probably more secure if you get it exactly right, but also more going on so easier to miss something.