tooling for passthrough iam authorization