|
2 | 2 |
|
3 | 3 | ### Table of Contents
|
4 | 4 |
|
5 |
| -1. [IAM JSON Policy Element Version](#iam-json-policy-element-version) |
6 |
| -2. [IAM JSON Policy Element Id](#iam-json-policy-element-id) |
7 |
| -3. [Cloud Computing Overview](#cloud-computing-overview) |
8 |
| -4. [What is AWS Cloud?](#what-is-aws-cloud) |
9 |
| -5. [Benefits of AWS Cloud](#benefits-of-aws-cloud) |
10 |
| -6. [Amazon Simple Storage Service (Amazon S3)](#amazon-simple-storage-service-amazon-s3) |
11 |
| -7. [Use Cases of Amazon S3](#use-cases-of-amazon-s3) |
12 |
| -8. [Amazon EBS (Elastic Block Store)](#amazon-ebs-elastic-block-store) |
13 |
| -9. [Amazon EFS (Elastic File System)](#amazon-efs-elastic-file-system) |
14 |
| -10. [Amazon FSx](#amazon-fsx) |
| 5 | +1. [Cloud Computing Overview](#cloud-computing-overview) |
| 6 | +2. [What is AWS Cloud?](#what-is-aws-cloud) |
| 7 | +3. [Benefits of AWS Cloud](#benefits-of-aws-cloud) |
| 8 | +4. [Amazon Simple Storage Service (Amazon S3)](#amazon-simple-storage-service-amazon-s3) |
| 9 | +5. [Use Cases of Amazon S3](#use-cases-of-amazon-s3) |
| 10 | +6. [Amazon EBS (Elastic Block Store)](#amazon-ebs-elastic-block-store) |
| 11 | +7. [Amazon EFS (Elastic File System)](#amazon-efs-elastic-file-system) |
| 12 | +8. [Amazon FSx](#amazon-fsx) |
15 | 13 |
|
16 |
| -## IAM JSON Policy Element Version |
17 |
| -#### Definition and Purpose |
18 |
| - |
19 |
| -The **Version** element in an IAM (Identity and Access Management) JSON policy specifies the version of the policy language used to write the policy. This is distinct from a policy version, which refers to different iterations of a customer-managed policy in IAM. |
20 |
| - |
21 |
| -#### Key Points |
22 |
| - |
23 |
| -1. **Syntax Specification**: The Version element defines the syntax rules that IAM uses to process the policy. It must be included outside the Statement element. |
24 |
| - |
25 |
| -2. **Current Version**: |
26 |
| - |
27 |
| - - **2012-10-17**: This is the current version and should be used for all new policies. It supports all available policy features, including policy variables. |
28 |
| -3. **Deprecated Version**: |
29 |
| - |
30 |
| - - **2008-10-17**: This version is outdated and should not be used for new or updated policies. It does not support newer features like policy variables. |
31 |
| - |
32 |
| -#### Example Policy |
33 |
| - |
34 |
| -Here is an example of an IAM policy with the Version element: |
35 |
| - |
36 |
| -```json |
37 |
| -{ |
38 |
| - "Version":"2012-10-17", |
39 |
| - "Statement":[ |
40 |
| - { |
41 |
| - "Effect":"Allow", |
42 |
| - "Action":"s3:ListAllMyBuckets", |
43 |
| - "Resource":"*" |
44 |
| - } |
45 |
| - ] |
46 |
| -} |
47 |
| -``` |
48 |
| - |
49 |
| -- **Version**: Specifies the version of the policy language. |
50 |
| -- **Statement**: Contains the permissions. |
51 |
| - - **Effect**: Defines whether the action is allowed or denied. |
52 |
| - - **Action**: Specifies the action that is allowed (in this case, listing all S3 buckets). |
53 |
| - - **Resource**: Defines the resource to which the action applies (here, all resources). |
54 |
| - |
55 |
| -#### Practical Implications |
56 |
| - |
57 |
| -- Always use `"Version": "2012-10-17"` in your policies to ensure compatibility with all current IAM features. |
58 |
| -- Avoid using `"Version": "2008-10-17"` as it lacks support for newer features, such as policy variables. |
59 |
| - |
60 |
| - |
61 |
| -## IAM JSON Policy Element Id |
62 |
| - |
63 |
| -#### Definition and Purpose |
64 |
| - |
65 |
| -The **Id** element in an IAM JSON policy is an optional identifier used to uniquely distinguish a policy. This identifier is used differently across various AWS services. While it is allowed in resource-based policies, it is not permitted in identity-based policies. |
66 |
| - |
67 |
| -#### Recommendations |
68 |
| - |
69 |
| -- **Uniqueness**: To ensure the Id is unique, it is recommended to use a UUID (Universally Unique Identifier). |
70 |
| -- **Services Usage**: The Id element's usage varies with different AWS services; hence, incorporating a UUID helps maintain consistency and uniqueness. |
71 |
| - |
72 |
| -#### Example Policy |
73 |
| - |
74 |
| -Here is an example of an IAM policy including the Id element: |
75 |
| - |
76 |
| -```json |
77 |
| -{ |
78 |
| - "Version": "2012-10-17", |
79 |
| - "Id": "cd3ad3d9-2776-4ef1-a904-4c229d1642ee", |
80 |
| - "Statement": [ |
81 |
| - { |
82 |
| - "Effect": "Allow", |
83 |
| - "Action": "s3:ListAllMyBuckets", |
84 |
| - "Resource": "*" |
85 |
| - } |
86 |
| - ] |
87 |
| -} |
88 |
| -``` |
89 | 14 |
|
90 | 15 | ### Cloud Computing Overview
|
91 | 16 |
|
|
0 commit comments