From the course: AWS Essential Training for Architects (2019)

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

IAM: Groups, roles, and permissions

IAM: Groups, roles, and permissions - Amazon Web Services (AWS) Tutorial

From the course: AWS Essential Training for Architects (2019)

Start my 1-month free trial

IAM: Groups, roles, and permissions

“

- [Instructor] In addition to managing the master account user, the identity and access management service, or IAM, provides the ability to manage access control entities, such as users, groups, roles, and permissions. These varying access entities are created and then applied to individual services and API calls. These are the mechanisms used to control what level of access is granted to which services, which actions can be performed within these services, and which resources are available within these services. When using IAM to create new users, the newly created user has no access granted by default. This adheres to the security principle of least privilege, which specifies that a user or resource should only have the minimum permissions necessary to carry out and perform their responsibilities. Starting with no permissions encourages adhering to this principle of least privilege. There are different credential types that a…

Contents