Stav dette: On the modelling and analysis of Amazon Web Services access policies