[WIP] AWS IAM configuration DSL