How would you secure AWS IAM roles, policies, least privilege, and cross-account access in a cloud environment?
