Figure 13.26 can help you to understand the architectural overview at a high level. It illustrates this from the beginning, from when the resource is created until the allow or deny permission is evaluated:
Figure 13.26: Architectural overview (policy evaluation)
Each of the points given in Figure 13.24 is explained as follows. Readers should refer to the preceding diagram and co-relate the point numbers given in the diagram:
- A user creates an AWS resource. For example, Bob creates SNS topics. Bob is the owner for SNS topics.
- Topics are created within AWS SNS.
- An owner, also called an issuer, creates an access policy. Usually, one policy with one or more statements is created, rather than multiple policies, as it is easy to manage.
- Requests are incoming from the requesters to AWS SNS. Requesters can be subscribers or publishers.
- All incoming requests...