In an IAM policy, which key specifies the AWS resources the policy applies to?
easy📝 Conceptual Q2 of 15
AWS - Identity and Access Management
In an IAM policy, which key specifies the AWS resources the policy applies to?
A"Action"
B"Resource"
C"Effect"
D"Principal"
Step-by-Step Solution
Solution:
Step 1: Identify the purpose of the "Resource" key
The "Resource" key defines which AWS resources the policy statement applies to, such as specific S3 buckets or EC2 instances.
Step 2: Compare with other keys
"Action" defines what can be done, "Effect" allows or denies, and "Principal" defines who the policy applies to, but only "Resource" specifies the target resources.
Final Answer:
"Resource" specifies the AWS resources -> Option B
Quick Check:
Resource = Target AWS resources [OK]
Quick Trick:"Resource" points to the AWS objects affected by the policy [OK]
Common Mistakes:
Mixing up "Resource" and "Principal"
Assuming "Action" defines resources
Forgetting to specify "Resource"
Master "Identity and Access Management" in AWS
9 interactive learning modes - each teaches the same concept differently