Earlier quoted context omitted.
I disagree. Once you learn IAM and able to segregate users into groups each with its own layer of security, then it is good enough. Often the UI, and docs make it seem like everything is all over the place but AWS feels like lego with some pieces tucked away. That is where I think AWS can be improved upon with a better documentation UI and discoverability. I do have to commend Google on Flutter + Firebase + Firebase…
IAM shouldn't be a thing to learn. It's account management, default and easy to access options should be sane enough for most people to use. At big companies, sure someone has it as a dedicated part of their job description. But if you're in the majority of smaller companies, ones maybe that's just doing e-commerce and tech isn't their core skill set, account settings should be near invisible and still be trustworthy…
Custom roles created through Terraform helped a lot.