{"id":"iam-session-policy-resource-based-arn-distinction","text":"Resource-based policies referencing a session ARN bypass session policy limits and permissions boundary restrictions, while those referencing the entity (role/user) ARN do not bypass these limits.","truth_value":"IN","source":"entries/2026/03/11/IAM-latest-UserGuide-access_policieshtml.md","source_url":"","source_hash":"6bf76088c297db12","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-session-policy-resource-based-arn-distinction","truth_value":"IN","reason":"premise"}]}}