AWS IAM
Written in 2018. Tools, APIs and prices may have changed since.
Lab note What I wrote down while learning this by building with it. Short by design; the code is no longer public.
serverless-project-policy-templates/ - serverless project policy templates for the various roles (admin, support, lambda, apigateway). they aim to isolate permissions by matching resources against a project prefix