Identity-based policies – Attach managed and inline policies to IAM identities (users, groups to which users belong, or roles). Identity-based policies grant permissions to an identity.
related links: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html https://awspolicygen.s3.amazonaws.com/policygen.html