Yeah, the thing IAM is missing is "sensible defaults", i.e. pre-populated templates. They have this, but it's not the default. I suspect there's probably a ca

Yeah, the thing IAM is missing is "sensible defaults", i.e. pre-populated templates. They have this, but it's not the default. I suspect there's probably a career (for a while) in being an IAM/VPC/etc. configuration specialist.