Damn @awscloud is a sooo damn cool but the IAM users, roles, groups and stuff is just a headache. Guys I am sure you can do better ..