- prod group - SES Full Access - Reduce from full to what is needed - EC2 Full Access - Reduce from full to what is needed - s3-prod, s3-dev, s3-test policy - These have full control of s3 buckets. Minimize this to just what they need - Find way to make SES-dev