AWS IAM Identity Access Management

What is IAM

IAM allows us to manage user and their privilege of access to the AWS Console.
IAM is t important to understand IAM

IDENTITY ACCESS MANAGEMENT (IAM) offers the following features;

• Centralized control of  AWS account - We can access anywhere through a browser 
• Shared access to AWS  Services - We can create multiple users and access the AWS Services
• Granular permissions - We can give users permission-based access
• Identity federation (including active directory, Facebook, LinkedIn, etc.)
• Multifactor authentication - We can give MFA for users to authenticate and use services securely
• Provide temporary access for user/device and services whenever necessary 
• Allow users to set up their own password rotation policy.
• Integrates with  many different AWS  Services
• IAM also supports PCIDSS compliance.

KEY TERMS FOR IAM

1. User

End-users such as people employees of an organization to access the AWS resources.

2.Groups

A collection of users is known as groups. Each user in the group will inherit the permission of the group.

3.Policies

Policies are made up of documents called policy documents. These documents are in a format called JSON and They give permissions as to what a User / Group / Role is able to do.

4.Roles 

The role is defined as a set of policies/permission, we can create a role and then assign them to AWS Resources.

How to create an IAM User

Click IAM under security and compliance in AWS Services dropdown

Click Users tab on left side

Click Add User Button

Fill the details as you want and click Next: Permissions button

Select the group if already created or create the group and Click Next: Tags Button

Give Key and Value if Want and Click Next: Review Button

Review and click Create User Button

Download the CSV File without fail and don't lose the CSV file and click Close Button

AWS Cloud Computing