Wrote a blogpost about a weird "bug" I hit when using Serverless Framework with permission boundaries (tkg.codes).