IAM vs Resource Policies
- Using
AssumeRole
, original permissions have to give up - Lets say, I have permission to access DynamoDB`
- Using
AssumeRole
I got access ofS3
- When I am using this
AssumeRole
, I can only accessS3
, but can not accessDynamoDB
- But using
Resource Policies
we can use bothS3
andDynamoDB
- Resource Based Policies are provided by
- S3
- SNS
- SQS