A Flexible Authorization Model: Users, Groups, Roles, Policies, and How AWS Evaluates Them · SAA-C03 Chapter 3