AWS has an automated reasoning group working on tools to help answer the high level questions about complicated policy configurations. [0] has been submitted four times to Hacker News, and received a total of 4 points and 0 comments.

[0] https://aws.amazon.com/blogs/security/protect-sensitive-data...

[1] https://aws.amazon.com/security/provable-security/