In addition to supporting IAM user policies, some services support resource-based permissions,which let you attach policies to the service's resources instead of to IAM users or groups. Resourcebasedpermissions are supported by Amazon S3, Amazon SNS, Amazon SQS, Amazon Glacier andAmazon EBS. Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_SpecificProducts.html