IAM Policies

Attributes

The following sub-lessons discuss the key attributes of a policy.

Resource

This defines the AWS resource that we want the policy to apply to. For example, if we are granting access to an EC2 instance, the EC2 instance will be our resource. Every resource in AWS is identified by an Amazon Resource Name (ARN) i.e. . We need to provide the ARN of the resource while creating a policy.

Effect

Effect defines whether the policy aims to Allow or Deny access to a resource. When we attach a Deny policy for a resource to a user, the user is unable to access the resource. The thing to note here is that Deny policies take precedence over ...