What are you trying to figure out? I will say IAM seems daunting because it's used by every other service; you don't have to know what every property or policy is in order to effectively secure your resources.