Which AWS feature allows you to restrict access to AWS resources based on specific conditions?

IAM policies are the feature that enables you to restrict access to AWS resources based on specific conditions. They are the fundamental mechanism for managing permissions in AWS.

Using IAM policies, you can define granular permissions for different users, groups, or roles. These policies contain a list of statements that specify which actions are allowed or denied on specified resources. Additionally, you can include conditions that provide context for when the permissions apply, such as the time of day, the IP address from which the request is made, or whether a particular tag is present on the resource. This level of control means you can tailor access to meet the security requirements of your organization effectively.

Other options such as security groups, route tables, and network ACLs serve different purposes. Security groups act as virtual firewalls for EC2 instances to control inbound and outbound traffic but do not provide fine-grained permission controls like IAM policies. Route tables manage the routing of network traffic but are unrelated to access permissions for resources. Network ACLs also serve to control network traffic at the subnet level, similar to security groups, but again do not deal with permissions or access to AWS resources directly.