AWS, Security, Architecture, Authentication, Authorization.
role of SDK call and uses the temporary IAM credentials to create a boto client for the SNS publish message SDK call. Service B remains as in the resource-based policy example; it can work only as a resource policy that allows its SQS to subscribe. However, service A requires some code changes.