Ravi Sir's Cards › AWS
IAM policy JSON fields
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Society notice: clubhouse Allow 6 a.m.–10 p.m. (Condition). IAM policies read the same way.
What is it?
Policy JSON: Version, Statement, Effect, Action, Resource, optional Condition. Use Version 2012-10-17 for modern conditions.
2012-10-17
How to do it
Allow only the exact Actions and ARNs you need; add Condition for IP, MFA, time or tags.
Example
Allow s3:GetObject on arn:aws:s3:::lab-bucket/* — one bucket’s objects, not s3:*.