Breaking News: Grepper is joining You.com. Read the official announcement!
Check it out

Anatomy of a IAM Policy

Pragya Keshap answered on February 21, 2023 Popularity 1/10 Helpfulness 1/10

Contents


More Related Answers

  • statement in iam policy
  • Can you give an example of an IAM policy and a policy summary?

  • Anatomy of a IAM Policy

    0

    A Statement is what defines a specific permission and contains the following:

    Action - define what you can (or cannot, in case of Effect Deny) do to a resource like viewing, creating, editing and deleting.

    Resource - an entity that exists within an AWS Service. it defines what actions are available element specifies the object or objects that the statement covers.

    Effect element is required and specifies whether the statement results in an allow or an explicit deny.

    Condition element (or Condition block) lets you specify conditions for when a policy is in effect. (for example allow access only from specific IP or if MFA is enabled "Condition": {"Bool": {"aws:MultiFactorAuthPresent": "true"}})

    Sid - an optional identifier for each statement, can be customised to make each statement, if you have more than one in the same policy, more readable and, well identifiable

    Principal - this is only available/necessary in Resource Based policies, and identifies who is entitled to execute the action on the resource 

    Popularity 1/10 Helpfulness 1/10 Language whatever
    Source: Grepper
    Link to this answer
    Share Copy Link
    Contributed on Feb 21 2023
    Pragya Keshap
    0 Answers  Avg Quality 2/10


    X

    Continue with Google

    By continuing, I agree that I have read and agree to Greppers's Terms of Service and Privacy Policy.
    X
    Grepper Account Login Required

    Oops, You will need to install Grepper and log-in to perform this action.