Research - Restrict incubator apply privileges

[ale210]

Overview

In incubator, apply operations currently use AdministratorAccess permissions. This may be too broad, and this task is to research restrictions to that policy

Action Items

Create a list of except permissions that we can apply on top of the AdmistatorAccess policy. This can include things like:

• IAM Users
• Billing