AWS Certified AI Practitioner AIF-C01 Practice Question

A customer managed policy lets you create a single reusable JSON policy document, then attach it to multiple IAM identities such as roles, users, or groups. This avoids duplication and simplifies updates, because you modify the policy in one place and the change propagates to every attached role. A role trust policy only controls who can assume the role; it does not grant S3 permissions. Service control policies apply at the AWS Organizations level and do not attach directly to individual roles. Adding an inline policy to every role is exactly what the team wants to avoid because it duplicates policy documents and is harder to maintain.