IAM policies should be easy, reusable, and concise. Stop dealing with JSON strings — here’s how to make AWS access control painless