Ensure that RAM policies are not attached to RAM users and are only attached to groups and roles.
Assigning RAM policies at the group or role level reduces the complexity of access management which in-turn can reduce the possibility of accidental access to users.
Ensure that RAM policies are not attached with RAM users.