https://forums.aws.amazon.com/thread.jspa?threadID=258457&tstart=675

- "Thanks. I knew that's what was happening but I couldn't figure out how to fix it. Writing policies is too difficult."