IAM Policies

IAM policies, in depth!

On the surface, these are just JSON documents - but they're quite powerful!

They describe who can (and who can't) do what on which things. They are the lowest level "unit" of IAM.

There's a few peculiarities to the Policy JSON schema, so pay close attention!