https://mamchenkov.net/wordpress/2017/05/22/aws-iam-policies-in-a-nutshell/