@awscloud IAM policy sucks, it definitely needs to be improved significantly. I have no idea how to use this thing. @AWSSupport