https://www.javacodegeeks.com/2023/10/fortify-your-aws-account-5-top-practices-for-iam-security.html