https://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/

IAM is basically

Who can do what to which resources. When do we care?

Nice article.