I've gone through a few security tutorials on AWS and noted that each tutorial focused on role-based access control only. Has anyone used rule-based access control on AWS? If so, could you point me to links or documentation?

  • what is "rule"-based access control?
    – schroeder
    May 8, 2018 at 9:54

1 Answer 1


You mean attribute-based? Yes it is possible. AWS has several ways to do that e.g. AWS IAM which can be used across AWS services. In some cases you can also use resource-based policies (AWS API gateway). Lastly, there are companies e.g. Axiomatics and Savyint who also address this need.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .