Yeah, this is my experience with IAM too, bullet proof, but so massively complicated, that I'm pretty sure that no human can create a secure IAM policy because no human can understand what the heck is going on. https://x.com/ben11kehoe/status/1440699563245924356
Also reminds me of the high availability configurations for #mssql - so complicated that a HA SQL cluster was guaranteed to be misconfigured and have configuration outates, ie. the HA feature was a driver of downtime (& MS staff could always blame stupid customers)
♡ 0 ↻ 0