What are some examples of AWS IAM policies?

What are some examples of AWS IAM policies?

AWS IAM policies are JSON documents that define permissions. Examples include allowing S3 access or EC2 management.

Can you give me a specific example of a policy for S3 access?

Sure! Here's a simple policy that allows full access to a specific S3 bucket:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:*",
      "Resource": "arn:aws:s3:::your-bucket-name/*"
    }
  ]
}

What about a policy that denies access to EC2 instances?

You can create a policy like this to deny all actions on EC2:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Deny",
      "Action": "ec2:*",
      "Resource": "*"
    }
  ]
}

How do I attach these policies to a user?

You can attach policies to a user via the AWS Management Console, CLI, or SDK by selecting the user and adding the policy.