IAM Policies
EK, IAM, Policy, JSON, DOCUMENT, hai, JISME, "Effect" (Allow/Deny), "Action" (KAUNSA, API, call), "Resource" (KAUNSE, ARN, PAR), aur, OPTIONAL, "Condition" HOTE, HAIN.
Least, Privilege, principle, ke, HISAAB, se, HAR, USER/ROLE, ko, SIRF, UTNI, hi, permissions, do, JITNI, ZAROORI, hai — "AdministratorAccess" HAR, USER, ko, mat, do.
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": ["s3:GetObject", "s3:PutObject"],
"Resource": "arn:aws:s3:::my-bucket/*"
}]
}- Policy = JSON document with Effect, Action, Resource, Condition
- Least Privilege = sirf zaroori permissions do, na kam na zyada
- Explicit Deny hamesha Allow ko override karta hai
EK, IAM, Policy, JSON, DOCUMENT, hai, JISME, "Effect" (Allow/Deny), "Action" (KAUNSA, API, call, — jaise, "s3:GetObject"), "Resource" (KAUNSE, ARN, PAR, apply, hoga), aur, "Condition" (OPTIONAL, extra, RULES) hote, HAIN.
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::my-bucket/*"
}]
}Least, Privilege, ka, MATLAB, hai, — HAR, USER, ya, ROLE, ko, SIRF, UTNI, hi, PERMISSIONS, do, JITNI, USKE, KAAM, ke, liye, ZAROORI, hai, na, KAM, na, ZYAADA. YE, SABSE, IMPORTANT, IAM, security, best, practice, hai.