#AWS #IAM is easy!

You just create a user, then create a group, then set up MFA, then add the user to the group, then create permissions policies for all of the hundreds of services the user needs to use, then create a Role, then assign the policies to the Role, then the user can use STS to assume the Role, then they have an access token they can use. Make sure that you tag your services and use attribute based access control to make sure your policies have limited access.

SEE! SIMPLE! 😵‍💫