Admin Tests on Agents Identity Generator. Generate least-privilege IAM permissions boundaries based on actual AWS activity.