What factor is not used in calculating the net effective permissions for a resource in AWS?

IPTables is a Linux kernel-level packet filtering tool that operates at the OS layer, completely outside of AWS's IAM permission evaluation logic. AWS net effective permissions are determined by evaluating IAM identity policies, resource policies, SCPs, permission boundaries, and session policies - none of which involve host-based firewalls. IPTables has no role in AWS authorization decisions.

AWS IAM policies are a direct input into the effective permissions calculation, evaluated against identity-based and resource-based policies.

SCPs are organization-level guardrails that set the maximum permissions available to accounts and are explicitly part of the effective permissions evaluation.

Permission boundaries act as a ceiling on what permissions an IAM entity can exercise and are a recognized factor in the effective permissions model.