From the course: AWS Certified Generative AI Developer - Professional (AIP-C01) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

IAM policy types

IAM policy types

From the course: AWS Certified Generative AI Developer - Professional (AIP-C01) Cert Prep

Start my 1-month free trial Buy for my team

IAM policy types

“

In this lecture, we will discuss what a policy is and its different types. We will also cover how to use an IAM policy with your Amazon EC2 Instances, Amazon S3, AWS Organizations, and other AWS services. Let's start. In IAM, a policy is an object that defines the permissions of either an IAM identity or an AWS resource. As you know, an IAM identity can be an IAM user, an IAM group, or an IAM role. An AWS resource basically refers to the different AWS services that you can use in your account, such as EC2, S3, RDS, et cetera. An IAM policy contains permissions that explicitly allow or deny access to certain AWS services. It provides fine-grained access control to specific API actions, as well as the AWS resources that the policy should be applied to. For example, you can create a policy that only allows object upload to an S3 bucket by using the S3 PutObject API. You can also define a request condition that allows access to the API actions that you define only when the request comes…

Contents