[hcazz]

> whatever privileges I may have, I can pass on some or all of those, but no more.

That's just a permission boundary in AWS.

https://docs.aws.amazon.com/IAM/latest/UserGuide/access_poli...