AWS networking concepts in a diagram
Why is debugging IAM policies and auth issues such complete dogshit on AWS? Seriously, if you want to be a competitor, focus on this.<p>I&#x27;ve wasted hours trying to work out why I get an unauthorised error, and the official docs say to manually pick your way through the 8 or so different policies that might apply (SCPs, IAM, resource policies, etc). Yeah right.<p>When you eventually find the page showing how to use Athena with Cloudtrail, you discover half the requests are inexplicably missing. And even though error messages include a request ID, you can&#x27;t easily query for them, if it&#x27;s even possible. Maybe it is and I just haven&#x27;t discovered the right athena incantation. They should make it easy to just query by request ID and get clear messages telling you what policy denied the request.<p>It&#x27;s a total train wreck from start to finish. I guess by keeping such a shitshow they sell more support contracts though.