Status: IN
Resource-based policies are always inline (embedded in the resource) and never managed — unlike identity-based policies which can be AWS managed, customer managed, or inline.
Source: entries/2026/03/11/IAM-latest-UserGuide-access_policies_identity-vs-resourcehtml.md