Centralizing permissions via IAM is a seriously overlooked benefit.