You definitely still have to verify it. The AWS Policy Simulator is always consulted. But the way it can just start spitting out all the various permission gr

You definitely still have to verify it. The AWS Policy Simulator is always consulted. But the way it can just start spitting out all the various permission groups, use wildcards correctly, is a time saver.