AWS IAM Policies

Firstly, Identity Based

attach permission on user, group or role

Secondly, Resource Based

specified principal allowed to perform specified action on a resource. on what conditions and these are in-line policies

Finally, Session Based

• Intra-account
• Cross-account
• Service role e.g. ec2 to s3
• Identify federated e.g. gmail