Check for root account: DONE
Now we can enumerate policies (if the user has IAM permissions)