https://www.infoq.com/news/2021/04/netflix-consoleme-aws/
Dealing with IAM is one of the most painful parts of AWS. Maybe this will help.