IAM vs Resource Policies
- Using
AssumeRole, original permissions have to give up - Lets say, I have permission to access DynamoDB`
- Using
AssumeRoleI got access ofS3 - When I am using this
AssumeRole, I can only accessS3, but can not accessDynamoDB - But using
Resource Policieswe can use bothS3andDynamoDB - Resource Based Policies are provided by
- S3
- SNS
- SQS