Describe the bug When using the grantXXX command on a resource it applies the actions against the ARN of the current resources. While this is often what you want, some AWS services and actions do not ...