IAM policies (JSON structure) in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an IAM policy in AWS?

An IAM policy is a JSON document that defines permissions for AWS resources. It tells who can do what on which resource.

beginner

What are the main parts of an IAM policy JSON?

The main parts are: <br>1. Version - policy language version<br>2. Statement - list of permission rules<br>3. Effect - Allow or Deny<br>4. Action - what actions are allowed or denied<br>5. Resource - which AWS resources the policy applies to

beginner

What does the 'Effect' field in an IAM policy specify?

The 'Effect' field specifies whether the policy allows or denies the actions. It can be either 'Allow' or 'Deny'.

beginner

How do you specify multiple actions in an IAM policy?

You list multiple actions as an array of strings under the 'Action' field, for example: ["s3:GetObject", "s3:PutObject"].

beginner

What is the purpose of the 'Resource' field in an IAM policy?

The 'Resource' field specifies which AWS resources the policy applies to, using ARNs (Amazon Resource Names).

Which field in an IAM policy JSON defines whether to allow or deny permissions?

A Effect

B Action

C Resource

D Version

The 'Effect' field specifies if the policy allows or denies the actions.

What type of document format is used for IAM policies?

A YAML

B JSON

C XML

D CSV

IAM policies are written in JSON format.

In an IAM policy, where do you list the AWS actions you want to allow or deny?

A Effect

B Resource

C Action

D Statement

The 'Action' field lists the AWS actions the policy controls.

What does the 'Version' field in an IAM policy specify?

A The AWS service version

B The resource version

C The user version

D The policy language version

The 'Version' field specifies the version of the policy language.

Which of the following is a valid 'Effect' value in an IAM policy?

A Allow

B Authorize

C Grant

D Permit

'Allow' is the correct value to permit actions in IAM policies.

Describe the structure of an AWS IAM policy JSON document.

Think about the main parts that define permissions.

Explain how you would allow a user to read objects from a specific S3 bucket using an IAM policy.

Focus on the Effect, Action, and Resource fields.