Yet Another AWS IAM primer

How many IAM layers exist when accessing an S3 object from within an AWS VPC using an AWS principal? In AWS, even if an identity has the required permissions to access a resource, that does not guarantee the resource will be accessible. There are generally three IAM layers: identity, network (VPC), and resource. The rule of thumb of AWS IAM evaluation logic is that as long as there isn&#x27;t an…