Terraform IAM Policies: When to Use Managed vs Custom

This guide explains two approaches to IAM policies in Terraform: attaching AWS-managed policies for common permissions like Lambda logging, or writing custom policy documents for specific access needs. It clarifies the confusion between using aws_iam_policy_document and direct ARN references. The article provides code examples for both cases.