Ravi Sir's Cards › AWS
Managed vs inline policies
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Inline-only sprawl makes the same S3-read rule impossible to update in one place.
What is it?
AWS managed = AWS-maintained broad policies. Customer managed = your reusable JSON. Inline = glued to one user/role/group.
customer managed
How to do it
Prefer customer-managed policies for labs and apps; use AWS managed carefully (often too broad); use inline sparingly.
Example
One customer-managed ReadLabBucket attached to two roles updates both when you edit the policy once.