Fixing IAM policies is hard, and what have we done to solve it | Hacker News Reader