Beyond the Audit: Mapping SOC 2 Controls to AWS

A policy document says what's actually running in your cloud environment. A policy can claim you have access controls. Whether your IAM configuration actually enforces them is a different question ent