Just discovered AWS Managed Policies. This addresses a huge enterprise pain point. Thank you @awscloud @AWSIdentity for listening.