SSBucketeer currently deduce's the access group's associated team, and automatically mounts any bucket it find in their project (which is found using the access group's projectTemplate). Some teams have buckets in their project which they do not have access to. This causes the service to fail on startup. We need to check whether or not the group actually has access to the buckets we are mounting. Since we have a Security Command Center subscription, we can probably use the Policy Analyzer API for this.