Not at all. AWS IAM policy is a complex maze, but incredibly powerful. It solves this exact problem very well.

Do you honestly believe that they made the effort of setting the appropriate roles and policies, though?