text: **IAM permissions boundaries**
  
  With a permissions boundary, you set the maximum permissions that an identity-based policy can 
  grant to an IAM entity. 
  
  When you set a permissions boundary for an entity, the entity can perform only the actions 
  
  that are allowed by both its identity-based policies and its permissions boundaries. Permissions 
  
  boundaries limit the maximum permissions for the user or role. 
  
  For example, assume that the role named CoreServiceAdmin should be allowed to manage only 
  Amazon S3, Amazon CloudWatch, and AWS Lambda. To enforce this rule, you can set a policy to set 
  
  the permissions boundary for the CoreServiceAdmin role. 