Thanks for your kind words and your feedback, Stefan. You are right, the aws_iam_policy_document is easier to reason and work with. I just wanted to take the shortcut to post a working policy to get IAM out of the way, but now I am considering just rewriting the IAM parts.

The environment property is amazing, I didn't know about it yet and I already know it will deprecate a lot of glue code. Thanks for sharing, Jannik :)

hey puz, thanks for your comment. I think I tried a combination of these but it didn't work out. Will try this again because yes this would make it simpler :)

Hey Chetan, that sounds amazing. Are you using machines on that already? Or running it with a fly.toml?