Roles and policies

- [Instructor] If you noticed…when we created our user account,…we gave it full access permissions.…Unless you're the owner of your AWS account,…you'll rarely see this in the real world.…This means you need to be familiar…with the creation and management of IAM policies,…which can be used to provide a more restrictive…and Java specific set of permissions.…Let's look at a policy right now.…Here in AWS Console,…we'll click on Policies under IAM,…we'll type S3,…and this is the AWS S3 full access policy.…

It has three main elements,…effect, which can be allow or deny,…the action, in this case the S3 service,…and the resource,…in this case it could be a specific bucket within S3.…Let's click on Roles now.…We'll click on Create Role.…When defining a role,…you'll be asked to first create a trust policy.…Essentially, this is just asking who can assume this role…and the answer to that is users from other accounts,…federated users, web identity users,…and in our case AWS Services.…

Let's now associate the policy we just saw with this role.…