as role-based or as resource-based.
as identity-based or as resource-based.
as security group-based or as key-based.
as user-based or as key-based.
Explanations:
IAM permissions are not assigned as role-based or resource-based. Role-based permissions are an example of identity-based permissions, and resource-based permissions are assigned to resources themselves.
IAM permissions can be assigned as identity-based (attached to users, groups, or roles) or resource-based (attached directly to resources like S3 buckets or Lambda functions).
IAM permissions are not assigned as security group-based or key-based. Security groups control network access, and key-based permissions relate to encryption keys, not IAM permissions.
IAM permissions are not assigned as user-based or key-based. User-based is a type of identity-based permission, but key-based refers to permissions for managing encryption keys, not IAM directly.
I categorize that the answer is:
as identity-based or as resource-based.