...
- Grant by Domain and Resource Type: grant permissions to all resources of the given resource type under the given domain.
- Grant by Account and Resource Type: grant permissions to all resources of the given resource type under the given account.
- Grant by individual resource: grant permission to an individual resource.
...
Permission
A policy consists of set of Permissions. A Permission is a way of defining access control.
Using Permission, customer defines what actions are allowed or denied, on what resources, under which account or domain.
...
- Action (API Name)
- Allow / Deny
- Scope (Account | | Domain | | Resource)
- Scope Id (Id of the above defined scope)
- Resource Type
...