AWS Permissions and SDK Complexity
Integrating with IAM, EC2, and S3 required precise IAM roles and understanding of the AWS SDK. Misconfigured permissions often led to failed API calls.

State-Dependent Operations
EC2 actions like start/stop required checking the current instance state to avoid invalid transitions, adding extra logic to the handlers.

Policy and JSON Handling
S3 bucket policy updates were tricky due to strict JSON structure and escaping requirements, which led to several debugging cycles.

Secure AI-Driven Actions
Acting on model suggestions (like detaching a risky policy) needed safeguards to avoid removing critical access unintentionally.