CDK routines for easily assigning correct and minimal IAM permissions
github.com/aws/aws-cdk
aws/aws-cdk