IAM policy evaluation, SCPs and cross-account access

SCS-C03 · Identity and Access Management · Updated

How AWS combines identity policies, resource policies, permission boundaries and SCPs, plus roles, IAM Identity Center and Roles Anywhere.

This lesson is part of full SCS-C03 access

The first 2 SCS-C03 lessons are free. Full access opens every lesson with its practice questions, and the exam-style SCS-C03 question bank.

In this lesson
  • Evaluation logic
  • Guardrails: SCPs and RCPs
  • Roles and federation
  • Permission boundaries
  • Limiting temporary credentials
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

SCS-C03 course outline

All 6 lessons · Course overview
  1. GuardDuty, Security Hub, Macie and InspectorDetection Free
  2. Incident response and containment on AWSIncident Response Free
  3. WAF, Shield, Firewall Manager and Network FirewallInfrastructure Security Full access
  4. IAM policy evaluation, SCPs and cross-account accessIdentity and Access Management Full access
  5. KMS keys, key policies and envelope encryptionData Protection Full access
  6. CloudTrail, Config and organization governanceSecurity Foundations and Governance Full access