Identifying Policy Structure and Syntax
An AWS IAM policy consists of several parts that define the permissions and access control rules for AWS resources. The different components of an IAM policy are as follows:
- Version: The
Version
field specifies the version of the IAM policy language being used. The current version is typically set to2012-10-17
. - ID: The
ID
field provides a unique identifier for the policy. It is optional and is mainly used for reference or management purposes. - Statement: The
Statement
field is an array that contains one or more policy statements. Each statement defines a specific permission or access control rule. Multiple statements can be used to define different permissions within the same policy. - Sid: The
Sid
field is an optional identifier for a statement. It is commonly used for reference and auditing purposes. - Effect: The
Effect
field specifies whether the statement allows or denies access. There are only two options:Allow
orDeny...