Permission Boundary Concept

Permission Boundary Concept An architecture diagram generated by Archify. Identity-Based Policy · attached to role/user · Effective Permission Calculation Identity-Based Policy attached to role/user Permission Boundary · defines maximum permissions · Effective Permission Calculation Permission Boundary defines maximum permissions Effective Permissions · policy ∩ boundary · Effective Permission Calculation Effective Permissions policy ∩ boundary Identity Policy · allows s3:*, ec2:*, rds:* · Example Identity Policy allows s3:*, ec2:*, rds:* Permission Boundary · allows s3:*, ec2:Describe* · Example Permission Boundary allows s3:*, ec2:Describe* Effective Permissions · s3:*, ec2:Describe* only · Example Effective Permissions s3:*, ec2:Describe* only AND AND intersection intersection Effective Permission Calculation Example Legend Backend Security