Subiam is a tool to manage IAM. It defines the state of IAM using DSL, and updates IAM according to DSL. It's forked from Miam. Miam is designed to manage all IAM entities in the AWS account. Subiam is not so. Subiam is designed to manage sub part of IAM entities in the AWS account. For example around MySQL instances / around web servers / around lambda functions / around monitoring systems. Notic