IAM policy
An IAM policy is a declarative set of rules specifying which identities or principals may perform which actions on which resources.
Amazon Web Services in Action, Third Edition: An in-depth guide to AWS
An IAM policy is a document that defines permissions by allowing or denying actions on resources for AWS identities or principals.
- How it is used
- Controls which AWS API actions users, groups, roles, and workloads may perform on resources.
- How deep it goes
- Works through JSON statements, deny precedence, resource ARNs, policy types, and conditional permissions, without detailing a full policy-evaluation procedure.
- Examples
- Uses EC2 termination and self-stopping policies, a Lambda tagging policy, and RDS policies that deny destructive actions.
- What you can do after
- Apply it via JSON or CloudFormation to grant task-specific AWS permissions and explicitly deny unwanted actions.
Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform
An IAM policy is a declarative access-control specification that grants or denies identities permission to perform actions on resources.
- How it is used
- Separates IAM policy management from monolithic infrastructure configuration while preserving active access and idempotency.
- How deep it goes
- Shows copying, generating, importing, removing, and planning, stopping at implementation rather than policy-design theory.
- Examples
- Uses GCP service accounts with viewer, editor, and owner roles, plus Python-generated JSON and Terraform commands.
- What you can do after
- Operate/configure Terraform IAM resources by separating configuration, importing existing state, and verifying zero-change plans.
Build Python Web Apps with Streamlit
An IAM policy is a declarative AWS document that specifies which actions are allowed or denied on which resources.
- How it is used
- Controls AWS service access for deployment users and instance roles.
- How deep it goes
- Explains policy selection and attachment, but does not detail policy document syntax or evaluation rules.
- Examples
- Uses Elastic Beanstalk, EC2, and S3 policies in an AWS deployment setup.
- What you can do after
- Operate/configure AWS deployment access by attaching named policies to an IAM user.
Read how Build Python Web Apps with Streamlit explains IAM policy →
Related concepts
- Amazon ElastiCacheconfigures · Amazon ElastiCache is an AWS-managed in-memory caching and data-store service supporting engines such as Redis and Memcached.
- roleused by · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
- Amazon Relational Database Service (RDS)configures · Amazon Relational Database Service is an AWS-managed service for deploying, operating, and scaling relational databases.
- AWSuses · Amazon Web Services (AWS) is Amazon's public cloud computing platform, providing on-demand infrastructure and managed services over the internet.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.