Who may do what in your AWS account: give an application a role with exactly the permissions it needs, and test the result before it runs. This interactive lesson needs JavaScript.
