Permission Boundaries

Advanced feature to set a maximum number of permissions a user or role can get (not groups).

It overrides explicit IAM permissions.