Explain the IAM policy magic about chalice

[lstroud]

I agree. It would be nice if the policy generator could read a list of policy arns from the config file and append those to what it generates. That would enable incremental improvement in the generator while allowing folks to fulfill their needs until it's ready.

[dg-nvm]

Resources are just always wildcard, this feature is not usable at that state. Could ask developer about this, getting parameters for function calls is not impossible.

                    # Probably impossible, but it would be nice
                    # to even keep track of what resources are used
                    # so we can create ARNs and further restrict the policies.
'Resource': ['*'],