AWS re:Inforce 2023 - Steps toward a Zero Trust architecture on AWS (IAM307)