Writing an IAM Policy That's Actually Least Privilege

I wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I...