Explain your approach to auditing and locking down overly permissive IAM roles across an enterprise AWS environment at AAA Life Insurance.