This is the way. I’ve seen this happen countless times. It’s happened to me too. It’s happened to colleagues. The worst case I’m aware of from first-hand knowl

This is the way. I’ve seen this happen countless times. It’s happened to me too. It’s happened to colleagues. The worst case I’m aware of from first-hand knowledge was a large cluster of resources that got deployed for a product demo by a sales engineer and forgotten about. Turned into a nice ~$100,000 surprise in the quarterly budget. Netflix built a tool for managing IAM permission requests as an auditable workflow, called ConsoleMe: https://github.com/Netflix/consoleme https://github.com/Netflix/consoleme