stacks/centralized_resources.py (1 line):
	- line 106: actions=["s3:*"], # TODO: Restrict