simply manage aws iam users and groups. a task which is unusually hard and unpleasent