Any topic created by an IAM user is automatically owned by that IAM user, and the default policy only allows the owner to publish and subscribe to the topic itself. This is of course very limiting, and in reality we would require the ability to assign fine-grained permissions to different security principals, or even anonymous publishers, to create messages in the SNS topic we have created.
Managing SNS access
Access control
With most services, control of the resource is governed directly through IAM. As we have learned, some services have resource policies and, with SNS, the resource policy will be the place where we will control access on a per-topic basis. While we have the ability in IAM to control access to the SNS service...
