Getting familiar with IAM
Perhaps the most fundamental service in AWS is IAM, which can secure every single other software service offered by AWS. IAM is used to create and manage AWS users. These users can be aggregated into groups. Permissions against AWS services and resources can also be managed with AWS IAM and permissions can be given directly to users or by assigning permissions to groups that users belong to.
More specifically, AWS IAM can be used to do the following:
- Manage users and their access permissions:
- Users can be created in IAM.
- Users can be assigned individual security credentials (passwords, access keys, and multi-factor authentication capabilities).
- Users can be assigned temporary security credentials to give them access to AWS services and resources.
- Users can be given different permissions to determine which actions they can perform.
- Manage IAM roles and role permissions:
- Roles can be created in IAM.
- Permissions can be managed in IAM to...