AWS re:Inforce 2023 - Validate your IAM policies with AWS CloudFormation hooks (IAM322)