...
What should be the method of ‘creating a custom Policy/Role’?
As seen above For this release, creating a custom policy and attaching it to the group/account involves multiple API calls. Also user has to add a permission entry for every single API that should be allowed.
So if user wants to allow alla ctions, there will be 300 'createAclPermission' calls involved.
Which method should we pick? Pending decision.
...
is supported through API only.
For further releases, we can provide either a UI or a config file + policy language mechanism to facilitate the custom policy creation.