I would say that's not being able to rollback to a last-known-good snapshot-of-the-world a feature, not a bug. A major premise of cloud computing is that every

I would say that's not being able to rollback to a last-known-good snapshot-of-the-world a feature, not a bug. A major premise of cloud computing is that everything is disposable. Consequently, this is meant to encourage consumers to express as much of their system's configuration with code and automation as possible. For example: the change to the S3 bucket policy that you mentioned would, theoretically, be done by changing the policy doc in Terraform and reapplying the Terraform configuration. Modification to those policies would, theoretically, only be allowed by anyone with the "AdministratorAccess" role, which would only be provided to the IAM user running Terraform (via temporary STS tokens) or admins through some sort of a "oh-shit" process.