Uncontrollable AWS IAM: Sts:GetSessionToken, GetCallerIdentity, and Policy Sim | Dark Hacker News