Any topic created by an IAM user is automatically owned by that IAM user, and the default policy only allows the owner to publish and subscribe to the topic itself. This is of course very limiting, and in reality we would require the ability to assign fine-grained permissions to different security principals, or even anonymous publishers, to create messages in the SNS topic we have created.