CDK routines for easily assigning correct and minimal IAM permissions
conda install conda-forge::aws-cdk.aws-iam