What is Amazon IAM (Identity access management)

Amazon IAM (Identity Access Management) -

IAM allows us to manage users and their level of access to AWS console.


IAM Features:-

• Centralized control of your AWS account
• Can integrate with existing Active Directory account allowing Single sign on.
• Access is available on User/Group/Roles.
• Support Multifactor authentication.
• Can setup own password rotation Policy

User- It's end user (think people)

Group- A collections of users one set of permission

Roles- Similar to Group but you can assign to both user and AWS resources( EC2 etc)

Policy templates- 

• Administrator Access- Full access to AWS and it's resource.
• Power user access- Full access except for User management.
• Read-only Access- Read-only access to AWS resource.

Pricing -

AWS Identity and Access Management is a feature of your AWS account offered at no additional charge. You will be charged only for use of other AWS services by your Users.