Study. uk . com
  1. Home
  2. All questions
  3. Question 126

AWS Certified Solutions Architect study material · question 126 of 500

Which statement describes how an identity-based policy differs from a resource-based policy?

  1. The first is Regional, the second is global
  2. The first applies only to roles, the second only to users
  3. The first grants to the identity it is attached to, the second to the principal it names
  4. The first can deny, the second can only allow
Show the answer

Answer: C. The first grants to the identity it is attached to, the second to the principal it names

An identity-based policy travels with the user, group or role; a resource-based policy sits on the resource and names its principal explicitly.

Source: Policies and permissions in AWS Identity and Access Managem… (Amazon Web Services) — Identity-based policies

Challenge yourself on this topic → Study as cards