It drives me nuts how difficult it is to find a comprehensive list of @awscloud IAM actions for API calls.