The Locked Filing Cabinet - folder-level S3 access

frame: The Two Planes - why AWS feels like 100 random things · principle: Why So Many Boxes? - Identity vs Permission

One cabinet, many teams’ drawers, and the two locks each drawer actually needs.

Before you start. You need to know that an IAM policy is a JSON document attached to an identity, allowing or denying specific actions on specific things - Why So Many Boxes? - Identity vs Permission built that vocabulary. Nothing else: everything past this point is one storage bucket, looked at two different ways.