{"id":"iam-effective-permissions-combine-identity-and-resource","text":"A user's effective permissions are cumulative across identity-based policies (user/group/role) AND resource-based policies (S3, SQS, SNS, KMS) — both must be reviewed for a complete permission picture.","truth_value":"IN","source":"entries/2026/03/11/IAM-latest-UserGuide-security-audit-guidehtml.md","source_url":"","source_hash":"f3a3fbbc547c3afb","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-effective-permissions-combine-identity-and-resource","truth_value":"IN","reason":"premise"}]}}