Inquiry about AWS policy.

Question

Which policy defines the actions a user is allowed to take in AWS?

Answer 1

In AWS, permissions live and die by one thing: the IAM policy attached to your identity.

In AWS Identity and Access Management (IAM), policies are JSON documents that explicitly define which actions a user (or role/group) can perform on which resources, and under what conditions. These policies are attached to IAM identities (users, groups, roles) as identity-based policies, or directly to resources like S3 buckets as resource-based policies. When a user makes a request, AWS evaluates all applicable policies to decide if the action is allowed or denied.aws.

Inside each policy, the Action element lists the exact API operations (for example, s3:ListBucket, ec2:StartInstances) that are permitted or blocked. So, the policy attached to the user (or the role they assume) is what actually defines what that person is allowed to do in AWS.

Answer 2

Identity and Access Management (IAM) is a policy that defines the actions a user is allowed to take in AWS. It also defines the user permissions for accessing various services and resources. IAM enforces least privilege through JSON policies, supports multi-factor authentication (MFA), and allows for credential management. It also monitors activity with AWS CloudTrail, ensuring security and compliance.