Creating a customer-managed policy
In Chapter 13, using the principle of least privilege in AWS, we created a regular IAM user and attached the following permission policies to it:
AWSIoTFullAccessAmazonSNSFullAccessAWSIoTAnalyticsFullAccessAWSLambda_FullAccess
These permissions are tagged as AWS Managed policies in the AWS IAM console, which are created and managed by AWS. They are designed to simplify the process of granting permissions for commonly used AWS services and tasks. AWS-managed policies ensure that your IAM roles adhere to best practices for security, aligning with AWS guidelines. However, for more specific use cases or to gain more granular control, usually you need to create some customer-managed policies.
Unlike AWS-managed policies predefined by AWS for use across multiple accounts, a customer-managed policy is an IAM policy you manage within your own AWS account. This gives you full control over the permissions you set, allowing for...
