One thing that might be of interest is that I explore a way to determine IAM actions needed to execute Terraform by first running it against LocalStack.