You can manage controlled access to SWF resources using IAM. Using IAM, you can create users in your AWS account and provide them with respective permissions. Each IAM user has a separate set of IAM keys. These IAM keys provide users with access to respective resources on AWS. An IAM policy can be attached to a user that controls what resources a user can access. Using IAM policies, you can control access at a granular level, such as allowing or denying access to a specific set of SWF domains.
SWF uses the following principles for access control:
- Access to various SWF resources is controlled only on the basis of IAM policies.
- IAM uses the denying-by-default policy, which means if you do not explicitly allow any access, then, by default, access is denied.
- You need to attach IAM policies to the actors of the workflow to control access to the SWF resources...