Super helpful - AWS changed their documentation a few years ago and I struggled to find IAM actions.