Who can reach what: principals → permission sets → AWS accounts. Source: grantry admin assignments, snapshot /*DATE*/.
How to read it: follow a line left to right — ■ who → ■ at what level → ■ in which account. Hover to preview, click to pin, then click names in the side panel to jump around. Line weight = number of assignments.
| Principal | Type | Permission set | Account | Account ID |
|---|