Create IAM policies | Terraform | HashiCorp Developer

You must assign explicit permissions to IAM identities (users, groups, or roles) to enable their access AWS resources. The associated IAM policy determines the privileges available to an IAM identity. Policies are JSON documents that define explicit allow/deny privileges to specific resources or resource groups. There are advantages to managing IAM policies in Terraform rather than manually in AWS