Permissions can be confusing in AWS,