Managed vs inline policies in AWS - Quick Revision & Key Differences

Recall & Review

beginner

What is a managed policy in AWS IAM?

A managed policy is a standalone policy that you can attach to multiple users, groups, or roles. It is created and managed independently from the identities it is attached to.

beginner

What is an inline policy in AWS IAM?

An inline policy is a policy that is embedded directly into a single user, group, or role. It exists only as part of that identity and cannot be reused elsewhere.

beginner

Which policy type is easier to reuse across multiple identities: managed or inline?

Managed policies are easier to reuse because they are standalone and can be attached to many users, groups, or roles.

intermediate

What happens to an inline policy if the user or role it is attached to is deleted?

The inline policy is deleted along with the user or role because it is embedded directly in that identity.

intermediate

Why might you choose an inline policy over a managed policy?

You might choose an inline policy when you want a policy that is tightly coupled to a single identity and should be deleted if that identity is removed, ensuring no leftover permissions.

Which AWS policy type can be attached to multiple users, groups, or roles?

A Managed policy

B Inline policy

C Both managed and inline policies

D Neither managed nor inline policies

Managed policies are standalone and can be attached to multiple identities, unlike inline policies which are embedded in a single identity.

What happens to an inline policy when the user it is attached to is deleted?

A It is deleted along with the user

B It is converted to a managed policy

C It remains in AWS and can be reused

D It is archived automatically

Inline policies are embedded in the user and are deleted when the user is deleted.

Which policy type is best for reusing the same permissions across many identities?

A Temporary policy

B Inline policy

C Managed policy

D Session policy

Managed policies are designed for reuse across multiple users, groups, or roles.

If you want a policy that is tightly linked to a single user and deleted with it, which policy should you use?

A Managed policy

B Resource policy

C Service control policy

D Inline policy

Inline policies are embedded in a single identity and deleted when that identity is deleted.

Which of the following is NOT a characteristic of managed policies?

A Can be attached to multiple identities

B Deleted automatically when a user is deleted

C Easier to maintain and update centrally

D Created independently from users or roles

Managed policies are independent and remain even if a user or role is deleted.

Explain the main differences between managed and inline policies in AWS IAM.

Think about how each policy is attached and what happens when the user or role is removed.

Describe a scenario where using an inline policy is more appropriate than a managed policy.

Consider when you want to keep permissions very specific and temporary.