Ravi Sir's Cards › AWS
Managed vs inline — when to use which?
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
What it is
Customer managed: reusable, editable in one place — default for apps/labs. AWS managed: convenient but often broad. Inline: one identity only — use sparingly.
customer managed
Why it matters
Trust policies on roles are resource-based JSON on the role, separate from identity-based managed/inline permissions.
How / example
Put ReadLabBucket as customer managed; attach to several roles; avoid copying the same inline JSON five times.