AWS, Security, Architecture, Authentication, Authorization.
authenticated and valid IAM credentials which are authorized will execute the service’s C API. All that remains is for service C to define which services (identities) and AWS accounts can execute its APIs. There are two ways to achieve that: Resource-based policy Identity-based policies assume role