Permission Boundaries for Developer Roles

Permission boundaries cap maximum permissions.

Idea

Cap on effective permissions even if role policy allows more.

Developer-created roles bounded.

Setup

Default boundary on developer-created roles.

Excludes destructive permissions.

Audit

Roles bumping against boundary surface.

Investigate; tune.