AWS AWS took 6 months to fix Security Token Service bug - IAM policy simulator inadequate, says Stedi , and The Stack April 10, 2024