This message was deleted.

Agreed! It would actually be great to think generally about the right set of libraries and helpers to make it easy to work with IAM role, policies, etc.