How do you create a function that checks a list of IAM policies and flags any that contain full administrative privileges at Amazon Services?