You cannot express "let Claude inspect AWS but never mutate it" in Claude Code permissions. Here is why.