What is a common mistake with AWS IAM in AWS?

Using administrator policies broadly, long-lived access keys, wildcard permissions, and shared human accounts greatly increases security risk. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.