IAM
Identity Access Management
Last updated
Identity Access Management
Last updated
ARN: Amazon Resource Name
Users - Individual Person / Application
Groups - Collection of IAM Users
Policies - Policy sets permission/control access to AWS resources. Policies are stored in AWS as JSON documents.
A Policy can be attached to multiple entities (users, groups, and roles) in your AWS account.
Multiple Policies can be created and attached to the user.
Roles - Set of permissions that define what actions are allowed and denied by an entity in the AWS console. Similar to a user, it can be accessed by any type of entity.
Identity-based policies: Identity-based policies are attached to an IAM user, group, or role (identities). These policies control what actions an identity can perform, on which resources, and under what conditions.
Resource-based policies: Resource-based policies are attached to a resource such as an Amazon S3 bucket. These policies control what actions a specified principal can perform on that resource and under what conditions.
Permission Boundary: You can use an AWS-managed policy or a customer-managed policy to set the boundary for an IAM entity (user or role). A permissions boundary is an advanced feature for using a managed policy to set the maximum permissions that an identity-based policy can grant to an IAM entity.
Inline Policies: Policies that are embedded in an IAM identity. Inline policies maintain a strict one-to-one relationship between a policy and an identity. They are deleted when you delete the identity.
