A critical AWS service has been inadvertently granted excessive permissions due to a misconfiguration in an IAM policy. This misconfiguration was detected during a routine security audit. What steps would you take to rectify this situation and prevent future occurrences of such misconfigurations?