Access in AWS is managed through policies, that can be attached to IAM identities or AWS resources.
Policies and permissions
