Skip to lesson

AWSAWS Certified Generative AI Developer - Professional2026-103.2 Implement data security and privacy controls

Configuring IAM Identity and resource-based policies

Completed by opening the official lab

Why it matters

GenAI workload authorization includes AWS permissions for the identities and resources involved. This general IAM exercise grounds the policy-management portion of 3.2.2 in permissions you configure yourself.

What to practise

Define permissions through policies and use identity or resource-based policies to manage them. Set an IAM permissions boundary to establish the maximum permissions for a role. Watch how IAM evaluates a request when identity policies, resource-based policies, and the boundary all apply.

How it fits

For 3.2.2, focus on identity and resource-policy configuration as the AWS authorization layer supporting a GenAI application. The exercise also adds practice with a role permissions boundary; application entitlement checks remain a separate design concern.