IAM: Policies

Question 1

Policies Inheritance

Answer 1

A group is entitled to the policy that has been assigned to them only.

If there is a person in two groups then only that person can access both policies.

If a person is not in a group then he can get an “inline”

Question 2

Version

Answer 2

Policy language version, include “2012-10-17”

Question 3

ID

Answer 3

Identifier of the policy (optional)

Question 4

Statement

Answer 4

One or more individual statements (required)

Question 5

Statement:
- Sid

Answer 5

Identifier for the statement (optional)

Question 6

Statement:
- Effect

Answer 6

Whether the statement allows or denies access (Allow, Deny)

Question 7

Statement:
- Principal

Answer 7

Account / User / Role to which this policy applied to

Question 8

Statement:
- Action

Answer 8

List of actions this policy allows or denies

Question 9

Statement:
- Resource

Answer 9

List of resources to which the actions applied to

Question 10

Statement:
- Condition

Answer 10

Conditions for when this policy is in effect (optional)