IAM is the AWS service that helps us manage the identity of users within AWS in order to verify their identity (authentication) and their permissions to AWS services (authorization).
IAM has four core concepts:
- Users: A user can be created in IAM and given the necessary permissions to access AWS resources.
- Groups: Users can be added to groups. Permissions can now be given to groups instead of individual users. This is a recommended best practice.
- Policies: Policies are JSON documents that define the permissions for users or groups.
- Roles: Roles are generally used for giving users temporary permissions to access an AWS service. For example, we can attach a role with S3 permissions to an EC2 service.
The IAM dashboard provides ...