You're reading from AWS Certified Cloud Practitioner Exam Guide Build your cloud computing knowledge and build your skills as an AWS Certified Cloud Practitioner (CLF-C01)

Product type Paperback

Published in Jan 2022

Publisher Packt

ISBN-13 9781801075930

Length 630 pages

Edition 1st Edition

Tools

AWS

Concepts

Cloud Computing

Author (1):

Rajesh Daswani

View More author details

Table of Contents (23) Chapters

Preface

1. Section 1: Cloud Concepts

2. Chapter 1: What Is Cloud Computing? FREE CHAPTER

3. Chapter 2: Introduction to AWS and the Global Infrastructure

4. Chapter 3: Exploring AWS Accounts, Multi-Account Strategy, and AWS Organizations

5. Section 2: AWS Technologies

6. Chapter 4: Identity and Access Management

7. Chapter 5: Amazon Simple Storage Service (S3)

8. Chapter 6: AWS Networking Services – VPCs, Route53, and CloudFront

9. Chapter 7: AWS Compute Services

10. Chapter 8: AWS Database Services

11. Chapter 9: High Availability and Elasticity on AWS

12. Chapter 10: Application Integration Services

13. Chapter 11: Analytics on AWS

14. Chapter 12: Automation and Deployment on AWS

15. Chapter 13: Management and Governance on AWS

16. Section 3: AWS Security

17. Chapter 14: Implementing Security in AWS

18. Section 4: Billing and Pricing

19. Chapter 15: Billing and Pricing

20. Chapter 16: Mock Tests

21. Answers

22. Other Books You May Enjoy

Defining permissions with IAM policies

IAM policies are objects attached to a given IAM identity, such as an IAM user, groups of IAM users, or an IAM role. These policies define what the identity can or cannot do within the AWS account and are written as JSON documents. In the following diagram, user Bob can access and read the content of an S3 bucket. The policy is attached to the group that Bob is a member of and therefore inherits the ability from the group.

When a principal (IAM user or IAM role) tries to access an AWS service, AWS will evaluate the policy document attached to it and determine what action the principal can or cannot perform:

Figure 4.6 – Policy document attached to the developers group, granting Bob read access to the Marketing Documents bucket

IAM policies enable you to follow the principle of least privileges, which means that identities can be configured to only have access to services and configuration options necessary...