Policy Types

Question 1

What are Identity-based policies?

Answer 1

Attached to users, groups, or roles.

Question 2

What are Resource-based policies?

Answer 2

Attached to resource & define permissions for principal accessing resource.

Question 3

What are IAM permissions boundaries?

Answer 3

Set max permissions an identity-based policy can grant IAM entity.

Question 4

What are AWS Organizations service control policies (SCP)?

Answer 4

Specify max permissions for organization or OU.

Question 5

What are Session policies?

Answer 5

Used w/ AssumeRole API actions.

Question 6

What is a Condition Block?

Answer 6

Allows to specify conditions for when policy is in effect.