AWS IAM

So many roles, so little time.

What do you like best? The granularity is awesome from a secuirty perspective. Also the ability to assume roles into another account will allow for scalability once it's setup correctly. What do you dislike? Our environment was not setup to best practices, or at least we didn't know best practices at the time of setup. What problems are you solving with the product? What benefits have you realized? Scalibility and speed of access for onboarded techs.

Super granular, could use better auditing tools.

What do you like best? I like how granular the permissions policies are -- typically if we want to restrict or allow access to an API or service in a specific way, we can figure it out with IAM policies. What do you dislike? We've struggled to find good processes to audit usage of each permission statement. There are some tools to help with this, but they;re very broad and per-service instead of per-permission. What problems are you solving with the product? What benefits have ...