Identity-based policies are attached to a user or role and say what that identity can do. Resource-based policies are attached to a resource and say who can access it. They include a Principal element naming who is allowed, which can be an AWS account, a role, or an AWS service such as s3.amazonaws.com. Many integration errors on the exam come down to a missing resource-based policy.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.