I did this in an AWS workshop and it was a disaster. It is overly complex, opaque and strict.