We used AWS serverless stack for some prototype project. Thus, we somehow had to use AWS IAM. It was no real decission and I don't like it as it is complex, has a bad UI and is hard to understand with a buggy online editor. Nowadays I would prefer Azure for such a project due to lower cost and ActiveDirectory integration.