Working with IAM Policy documents

[myitcv]

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html

Per a comment in CUE Slack:

They have a lot of boilerplate, and should often be generated based on other pieces of knowledge (i.e. other configuration). If you want service X to talk to AWS Y, then you probably have configuration in service X to talk to AWS Y; so it would make sense to then also make a policy document that explicitly allows service X to use AWS Y and nothing else