Ravindra BagaleCourses & study guides मराठी Track your progress

Ravi Sir's Cards › AWS

Trust policy vs permissions policy?

What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.

Trust policy vs permissions policy? Trust policy answers who may call sts:AssumeRole on this role. Permissions policy answers what API actions the resulting session may perform on which resources. A perfect S3 permissions policy still fails if trust Principal does not include the caller. Wrong trust is a top lab AccessDenied cause. Example: trust Principal = arn:aws:iam::111:user/ravi; permissions
Trust policy vs permissions policy? · Download PNG
Read card text

What this card says

What it is

Trust policy answers who may call sts:AssumeRole on this role. Permissions policy answers what API actions the resulting session may perform on which resources.

Why it matters

A perfect S3 permissions policy still fails if trust Principal does not include the caller. Wrong trust is a top lab AccessDenied cause.

Principal

How / example

Example: trust Principal = arn:aws:iam::111:user/ravi; permissions Resource = arn:aws:s3:::lab-bucket/* with s3:GetObject.

See all AWS revision cards