> You can simulate a policy with AWS IAM Policy Simulator Is it reliable though? I have experienced many situations where a role has access to a policy and yet

> You can simulate a policy with AWS IAM Policy Simulator Is it reliable though? I have experienced many situations where a role has access to a policy and yet the policy simulator said that access is denied due to "organization policy" with no further ability to drill down to which policy it thinks denies access. And it did that when the role did have access to the resource and could work with that resource successfully. So I stopped trusting the simulator. I wonder if others too have experienced similar issues with the simulator.