Is There Common Struggles in Learning Security on a S?

One of the things i struggle with early on in my learning around security is sort of the dfference in resource base policies and identity base policies are there common things that you run into that are difficult to teach or that are hang ups for students when learning? I am, good question. Look, the ones that have reallystood out to me is, it's probably kind of what you've touched on  and how they interact with each other. There's s c ps at the organization nd the account level. Ah, o know, there are permissions boundaries, and, youknow, there are session policies,. And all of these interact with each others in the context of the request