these are some of the policies we have in use in AWS right now.
with help from @gui today in getting his access to the private keys bucket