One might obtain the characteristics that have been granted to them, and the Authorization can control the permissions. You can also enable access to resources across AWS accounts in some cases.
