This is why I try not to have permissions to prod. Sure, in some sense as the AWS account owner and tech lead, I’m generally part of the trust chain and could

This is why I try not to have permissions to prod. Sure, in some sense as the AWS account owner and tech lead, I’m generally part of the trust chain and could grant them to myself. But there’s only misery available by having them bestowed normally. I want it to be effort to touch prod, preferably in a way that involves a second person — because it keeps me from being careless. Which I (as a human) often am. Can’t break what you can’t touch!