Changing your IAM policy will break something that wasn’t even supposed to exist.