Status: IN
Session policies (passed during AssumeRole or GetFederationToken) restrict permissions via intersection — effective permissions = identity-based policy ∩ permissions boundary ∩ session policy.
Source: entries/2026/03/08/iam-policies.md
JSON