Reviews your existing policies the way an auditor would.
Recommends the policies you actually need and drafts them for your stack.