ugh access + least privilege on AWS + GCP are really hard not made easier by the fact that debugging service accounts can sometimes require rebooting boxes or

ugh access + least privilege on AWS + GCP are really hard not made easier by the fact that debugging service accounts can sometimes require rebooting boxes or clusters 'cloud traceroute' to discover where exactly the problem is would be amazing (in fairness there are 'least privilege' tools I haven't tried -- listed below and I recall reading about others) 1. iam access analyzer https://aws.amazon.com/blogs/security/iam-access-analyzer-makes-it-easier-to-implement-least-privilege-permissions-by-generating-iam-policies-based-on-access-activity/ https://aws.amazon.com/blogs/security/iam-access-analyzer-ma... 2. airiam https://github.com/bridgecrewio/AirIAM https://github.com/bridgecrewio/AirIAM 3. policy simulator https://cloud.google.com/policy-intelligence/docs/iam-simulator-overview https://cloud.google.com/policy-intelligence/docs/iam-simula...