AWSSupportServiceRolePolicy – inadvertently included S3:GetObject permissions

Scott Piper is essential reading on this topic: https://twitter.com/0xdabbad00/status/1474176588468031510?s=...