What are some examples of AWS IAM policies?

What are some examples of AWS IAM policies?

AWS IAM policies are JSON documents that define permissions. Here are a few examples:

1. ReadOnlyAccess: Grants read-only access to all AWS services.
2. S3FullAccess: Allows full access to Amazon S3 resources.
3. CustomPolicy: You can create a policy that allows specific actions on specific resources.

Can you show me a custom policy example?

Sure! Here's an example of a custom policy that allows a user to list and get objects from a specific S3 bucket:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetObject"
      ],
      "Resource": [
        "arn:aws:s3:::example-bucket",
        "arn:aws:s3:::example-bucket/*"
      ]
    }
  ]
}

What does the 'Effect' field do in a policy?

The 'Effect' field in a policy specifies whether the statement allows or denies access. It can be set to either 'Allow' or 'Deny'.

How can I test my IAM policies?

You can test your IAM policies using the IAM Policy Simulator in the AWS Management Console. It allows you to simulate API calls and see if the policies grant or deny access.