AWS Cloud TutorialLesson 61Free preview

AWS User Access

This lesson is part of AWS · All levels

Summary

AWS IAM manages who can access resources through JSON-based users, groups, roles, and policies. Access should be applied with the principle of least privilege and MFA for sensitive accounts. Role is important because it provides temporary permission to other services or accounts without the need to share credentials.

Key points

Policy is a JSON document that contains permission/deny on a particular action
User for permanent identity, role for temporary access/service
The group makes it easy to implement the policy to multiple users at once
MFA adds a second layer of verification when logging in
The access key for programmatic access must be kept secure

Full lesson

Code examples and quizzes

Full lessons, code examples, and quizzes are available to subscribers. 5 questions.