Articles → AWS → Identity Based And Resource-Based Policy In AWS

Identity Based And Resource Based-Policy In AWS

In this article, we will discuss the difference between the identity based and resource-based policy in AWS.

Identity Based Policy

A policy applied on the user or the group is called the identity-based policy. Consider the following link. In this link, we have created a policy on S3 bucket.

If you check the JSON of the policy, you can see the following components.

Click to Enlarge

In the above policy: -

JSON parameter	Meaning
Version	Specifies the version of the policy.
Effect	The permissible values of the “Effect” parameter in “Allow” and “Deny”.
Action	Action performed on the resource.
Resource	ARN of the resource on which action should be performed.

Resource Based Policy

The policy that is applied on the AWS resource is called resource-based policy. Consider the following link. In this link, we are assigning the full s3 access to an EC2 instance.

Click to Enlarge

In the above policy, the "Principal" attribute specifies the service that has requested the access.

Posted By -	Karan Gupta

Posted On -	Friday, May 13, 2022

Query/Feedback

Your Email Id

Subject

Query/Feedback	Characters remaining 250