[f0e4c2f7]

> 10 years of experience, I’ve mostly used aws services in the past so I kind of understand their authentication models pretty well.

I think it's mostly this. IAM in AWS isn't exactly a walk in the park, especially when you start getting into granting only explicitly needed permissions. There aren't great systems for doing that (that I know). Lots of stuff that half works and you sort of have to know how to glue the rest together yourself.

I think GCP's permissions are essentially the same way but GCP is also less popular. So you have even less tooling and documentation.