From the course: Hands-On Development in AWS

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Understanding permissions

Understanding permissions

- In this lesson, we're going to investigate the components of IAM policies. We are also at the end going to give a demonstration of creating a policy. IAM policies are simply a set of permissions. These things can be assigned to users, groups, roles and resources. The policies define who can access what and what actions they can perform. We'll see this when we start breaking down the policies. It's simply a JSON document, defines a, an effect, an action, on resources and then some conditionals if we so choose. We have two different types of policies. We have managed policies and inline policies. Managed policies are standalone in that you can go into the policy section of IAM, click create policy, define the policy, and then it is reusable, it can be assigned to identities. However, you cannot assign it to a resource. These are assignable to users, groups, and roles, and you can reuse the policy across multiple entities. Inline policies are slightly different in that the policies are…

Contents