Comment by groaninvasion

AWS is always going to be a lego bricks - choose your own adventure or assemble your own stuff option for people who want to struggle with IAM policies. plus AWS VPs compete against each other, so there is no concept of the best opinionated way of doing things. just a bunch of random options with tradeoffs. might attract some nerds. nobody else