Architectural overview

Figure 13.26 can help you to understand the architectural overview at a high level. It illustrates this from the beginning, from when the resource is created until the allow or deny permission is evaluated:

Figure 13.26: Architectural overview (policy evaluation)

Each of the points given in Figure 13.24 is explained as follows. Readers should refer to the preceding diagram and co-relate the point numbers given in the diagram:

1. A user creates an AWS resource. For example, Bob creates SNS topics. Bob is the owner for SNS topics.
2. Topics are created within AWS SNS.
3. An owner, also called an issuer, creates an access policy. Usually, one policy with one or more statements is created, rather than multiple policies, as it is easy to manage.
4. Requests are incoming from the requesters to AWS SNS. Requesters can be subscribers or publishers.
5. All incoming requests...