At the time this project was put together, IAM didn't exist. But I agree that this would be the best approach going forward.