IAM policy

As explained in Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform

An IAM policy is a declarative access-control specification that grants or denies identities permission to perform actions on resources.

How Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform covers it

How deep it goes

Shows copying, generating, importing, removing, and planning, stopping at implementation rather than policy-design theory.

Examples

Uses GCP service accounts with viewer, editor, and owner roles, plus Python-generated JSON and Terraform commands.

What it assumes

Assumes an existing monolithic IaC configuration, live GCP resources, and familiarity with Terraform state operations.

What you can do after

Operate/configure Terraform IAM resources by separating configuration, importing existing state, and verifying zero-change plans.

How it connects

Connects IAM policies with infrastructure as code, Terraform state, service accounts, IAM roles, and idempotent refactoring.

liveBookmanning.com

Read Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Amazon Web Services in Action, Third Edition: An in-depth guide to AWSAn IAM policy is a document that defines permissions by allowing or denying actions on resources for AWS identities or principals.
• 

  liveBookmanning.com
  Build Python Web Apps with StreamlitAn IAM policy is a declarative AWS document that specifies which actions are allowed or denied on which resources.

Compare how 3 books explain IAM policy →

Related concepts

• Amazon ElastiCacheconfigures · Amazon ElastiCache is an AWS-managed in-memory caching and data-store service supporting engines such as Redis and Memcached.
• roleused by · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
• Amazon Relational Database Service (RDS)configures · Amazon Relational Database Service is an AWS-managed service for deploying, operating, and scaling relational databases.
• AWSuses · Amazon Web Services (AWS) is Amazon's public cloud computing platform, providing on-demand infrastructure and managed services over the internet.

This explainer was generated by Manning's knowledge graph from the text of Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform. The section links point to the parts of the book it draws on.