Page History

...

• Grant by Domain and Resource Type: grant permissions to all resources of the given resource type under the given domain.
• Grant by Account and Resource Type: grant permissions to all resources of the given resource type under the given account.
• Grant by individual resource: grant permission to an individual resource.

...

Permission

A policy consists of set of Permissions. A Permission is a way of defining access control.
Using Permission, customer defines what actions are allowed or denied, on what resources, under which account or domain.

...

• Action (API Name)
• Allow / Deny
• Scope (Account | | Domain | | Resource)
• Scope Id (Id of the above defined scope)
• Resource Type

...