man, there's a whole archive of stuff from Mat. This from the article "IAM Is The Worst” is a gem:

"So that's effectively the AWS story, which is terrible but at least it's possible to cobble together something that works and you can audit. Google looked at this and said "what if we could express how much we hate Infrastructure teams as a service?" Expensive coffee robots were engaged, colorful furniture was sat on and the brightest minds of our generation came up with a system so punishing you'd think you did something to offend them personally.”

matduggan.com/iam-is-the-worst