[isbvhodnvemrwvn]

I caught on the fact that they have much more finely grained logging than the users do (e.g. underlying specific access denied errors which are covered by a generic one users get), and sometimes report what they see there, with no consideration on the effect on the users. You can sometimes get some details on how the services work underneath.

It happened several times with Glue mentioned by the user two replies above (usually schema registry which requires *s in resource element of the policies to work).