This content originally appeared on DEV Community and was authored by Ajit Singh
IAM is the Identity and Access Management service in AWS it is used to create users and assign them to groups. Whenever anyone needs access to an AWS service within out organisation then we only want them to access only some services on our account because they can change something because of malicious intent or a mistake. We want to give them as little access as possible to complete there job to reduce any mishaps but when we create an account on AWS that user by default has root access.
Use of IAM
To combat this situation AWS has a service which allows us to create users and allow them only certain restrictions that service is IAM. In IAM for each user we create a new account and give them certain accesses and privileges. We can also create some groups which already contain access and privileges required to complete some tasks. After that we can add users to these certain groups.
IAM concepts
Majorly IAM is divided into 4 concepts:-
- User groups
- Users
- Roles
- Policies
User Groups
User groups are groups that are created to reuse access given to a certain user. Whenever we create groups we can attach certain access to a group. After that we can add users to a group. This helps in managing users to that all users that are in a group contain the same access. We can also add a user to multiple groups.
Users
These are the users created by IAM
Roles
Whenever an AWS service needs access to other services than we create a role an we can add access to other services buy using roles. I also allows application code running on an EC2 instance access perform actions on AWS resources.
I also allows to add users from other organisations.
Policies
Policies are the list of accesses provided to a user, user group or role in a JSON format AWS already contains many preexisting policies which are really helpful in providing access to AWS users.
This content originally appeared on DEV Community and was authored by Ajit Singh
Ajit Singh | Sciencx (2021-05-16T02:14:40+00:00) AWS Identity and Access Management. Retrieved from https://www.scien.cx/2021/05/16/aws-identity-and-access-management/
Please log in to upload a file.
There are no updates yet.
Click the Upload button above to add an update.