thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

Permissions Boundary

Advanced IAM feature setting the maximum permissions an identity-based policy can grant to a user or role.

Definition

A permissions boundary is a managed policy attached to a user or role that limits effective permissions to the intersection of the boundary and identity-based policies. It is used to safely delegate role creation to developers without allowing privilege escalation.

Example

Developers may create roles for their Lambda functions only if the roles carry the DevBoundary permissions boundary.

Exam tip

Boundaries never grant permissions; effective permissions are the intersection of the boundary and identity policies.

Related terms