IAM - remake using AI or Google

What is AWS Identity and Access Management?

A service for managing permissions and access to AWS resources

What does AWS Identity and Access Management control?

Who can access which resources and what actions they can perform

What is an IAM principal?

A user or role that can receive permissions

What is an IAM policy?

A document that specifies allowed actions on resources

What is the difference between IAM users and roles?

Users have long-term credentials while roles use short-term credentials

When would you use an IAM role?

When AWS resources need permissions without storing long-term credentials

What is AWS Security Token Service used for with IAM roles?

Providing temporary credentials to assumed roles

What is an IAM user group?

A collection of IAM users with shared permissions

How should IAM users be secured?

Use least privilege and multi-factor authentication

What is IAM Identity Center?

A service for centrally managing workforce access to AWS accounts and applications

When would you use IAM Identity Center?

When centrally managing user access across multiple AWS accounts