AWS Identity and Access Management (IAM) lets you securely control access to AWS services and resources.

An IAM group is a collection of IAM users. Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users.

Groups

An IAM user is an entity that you create in AWS to represent the person or application that uses it to interact with AWS.

Users

Service control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization. SCPs offer central control over the maximum available permissions for all accounts in your organization.

Service control policies (SCPs)

You can view service last accessed information for AWS Organizations using the IAM console

Organization activity

Set account-wide IAM user password rules and configure AWS Security Token Service endpoint settings.

Account settings

You can generate and download a credential report that lists all users in your account and the status of their various credentials, including passwords, access keys, and MFA devices.

Credential report

Access Analyzer

If you already manage user identities outside of AWS, you can use IAM identity providers instead of creating IAM users in your AWS account. With an identity provider (IdP), you can manage your user identities outside of AWS and give these external user identities permissions to use AWS resources in your account. This is useful if your organization already has its own identity system, such as a corporate user directory.

Identity providers

An IAM role is an IAM identity that you can create in your account that provides temporary permissions. You define the principals who can assume a role, such as IAM users, federated users, account members, or AWS services.

Roles

An IAM policy helps you securely control access to AWS resources. Attach IAM policies to IAM users, roles, or groups to define what those identities can access.

IAM
Security, Identity, & Compliance

Overview

Key Features

Links

Related Services

Amazon VPC

Elastic Load Balancing

Amazon EBS

Modern BDD Test Automation with Playwright, Typescript

AWS Cloud Mastery

IAMSecurity, Identity, & Compliance