access control on AWS shouldnt be so hard