Articles → AWS → Identity-Based And Resource-Based Policy In AWS

Identity-Based And Resource-Based Policy In AWS

This article will discuss the difference between identity-based and resource-based policies in AWS.

Identity-Based Policy

A policy applied to the user or the group is called an identity-based policy. Consider the following link. In this link, we have created a policy on the S3 bucket.

If you check the JSON of the policy, you can see the following components.

Click to Enlarge

In the above policy: -

JSON parameter	Meaning
Version	Specifies the version of the policy.
Effect	The permissible values of the Effect parameter in Allow and Deny.
Action	Action performed on the resource.
Resource	ARN of the resource on which action should be performed.

Resource Based Policy

The policy that is applied to the AWS resource is called resource-based policy. Consider the following link. In this link, we are assigning full s3 access to an EC2 instance.

Click to Enlarge

In the above policy, the Principal attribute specifies the service that has requested access.

Posted By -	Karan Gupta

Posted On -	Friday, May 13, 2022

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**