MTAR T3D Sessions: Designing AWS IAM Policies Without Breaking Production

More than a refresh: Conversations with the most interesting people you've never met · Mar 19, 2026 · 10m

In this episode, JD sits down with Hunter O’Brien to break down one of the most misunderstood areas of AWS: Identity and Access Management (IAM). Designing policies sounds straightforward, until wildcards, over-permissioned roles, and unclear resource access create real risk in production.

Hunter explains how the AWS IAM Policy Simulator allows teams to safely test roles before they reach production. By simulating API calls without affecting live systems or billing, organizations can design least-privilege policies, validate MFA enforcement, and avoid accidental overexposure.