Use IAM policy simulator for troubleshooting

How about using IAM policy simulator which allows for IAM policy troubleshooting (https://policysim.aws.amazon.com) ?
A reference on your next review might be useful I hope