A managed policy is a reusable AWS permission document that can be attached to IAM users, groups, or roles. Unlike an inline policy, it is created and maintained separately, so the same policy can be applied to many identities without rewriting permissions each time. This makes managed policies a core part of AWS access control.
In cyber security, managed policies matter because they let defenders change privileges quickly and consistently. After a credential leak or suspicious activity, AWS can attach a restrictive managed policy to an exposed identity to limit what the key can do. Attackers may also abuse overbroad managed policies if a compromised account already has excessive access. For defenders, the key point is that a managed policy is a control-plane tool: it can reduce damage fast, but it does not revoke a leaked credential. Cleanup still requires key rotation, permission review, and log investigation.