diff --git a/images/IAM_Policies_inheritance.png b/images/IAM_Policies_inheritance.png new file mode 100644 index 0000000..684193d Binary files /dev/null and b/images/IAM_Policies_inheritance.png differ diff --git a/sections/iam.md b/sections/iam.md index aac0630..20e9327 100644 --- a/sections/iam.md +++ b/sections/iam.md @@ -4,6 +4,7 @@ - [What Is IAM?](#what-is-iam) - [IAM: Users & Groups](#iam-users--groups) - [IAM: Permissions](#iam-permissions) + - [IAM Policies Inheritance](#iam-policies-inheritance) - [IAM Policies Structure](#iam-policies-structure) - [IAM – Password Policy](#iam--password-policy) - [IAM Roles for Services](#iam-roles-for-services) @@ -35,6 +36,10 @@ AWS Identity and Access Management (IAM) is a web service that helps you securel - These policies define the permissions of the users - In AWS you apply the least privilege principle: don’t give more permissions than a user needs +### IAM Policies Inheritance + +![IAM Policies Inheritance](../images/IAM_Policies_inheritance.png) + ### IAM Policies Structure - Consists of