AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. You use IAM to control who is authenticated and authorized to use resources.
IAM features
1-Shared access to your AWS account
2-Granular permissions
3-Secure access to AWS resources for applications that run on Amazon EC2
4-Multi-factor authentication (MFA)
5-Identity federation
1-Shared access to your AWS account
2-Granular permissions
3-Secure access to AWS resources for applications that run on Amazon EC2
4-Multi-factor authentication (MFA)
5-Identity federation
Accessing IAM
1-AWS Management Console
2-AWS Command Line Tools
3-AWS SDKs
4-IAM HTTPS API
1-AWS Management Console
2-AWS Command Line Tools
3-AWS SDKs
4-IAM HTTPS API
How IAM works
The IAM infrastructure includes the following elements:
•Terms
•Principal
•Request
•Authentication
•Authorization
•Actions or operations
•Resources
The IAM infrastructure includes the following elements:
•Terms
•Principal
•Request
•Authentication
•Authorization
•Actions or operations
•Resources
IAM Best Practices
1-Avoid the use of root account unless strictly necessary
2-Use temporary credentials
3-Embrace the least privilege principle and review all IAM permissions periodically
4-Enforce the least privilege principle to be implemented bi-directionally
1-Avoid the use of root account unless strictly necessary
2-Use temporary credentials
3-Embrace the least privilege principle and review all IAM permissions periodically
4-Enforce the least privilege principle to be implemented bi-directionally
5-Monitor account activity regularly using IAM Access Analyzer and AWS CloudTrail
6-Use Multi-Factor Authentication (MFA)
7-Enforce strong passwords
6-Use Multi-Factor Authentication (MFA)
7-Enforce strong passwords
• • •
Missing some Tweet in this thread? You can try to
force a refresh
