As much as I hate @awscloud IAM policies, its nice knowing even if my keys are stolen they wouldn't do much since I have them so limited