AWS IAM Policy Types and How To Use Them

When developing your access control strategy for your cloud environment the goal should be to provide least privilege access while making it easy to audit access across your environment. With so many different options and ways that things could go wrong, it’s important to have a plan for how to organize your access control policies in AWS. Here is the model I use when deciding where to place a particular access control in AWS.