IAM Introduction¶

• IAM stands for Identity and Access Management
• Your whole AWS security is there:
  • Users
  • Groups
  • Roles
• Root account should never be used (and shared)
• Users must be created with proper permissions
• IAM is at the center of AWS
• Policies are written in [[JSON]]

• IAM has a global view
• [[Multi factor authentication]] can be setup
• IAM has predefined "managed policies"
• It's best to give users the minimal amount of permissions they need to perform their job (least privilege principle)

IAM Hands On