AWS - IAM Notes

AWS-IAM-Notes.txt

IAM - Identity Access Management
Used to manage users, groups, roles, and polices.
IAM is universal which means that all users, groups, roles, permissions are not region specific ( at this time 2019 ).
You can setup password rotation policies, MultiFactor Authentication

Root Account
  - the initial account used to create the aws account
  - this should be the companies email account
  - has complete admin access (god mode)

Users
  - users belong to groups and can be assigned roles
  - new users 
    - have no access
    - are given an optional Access Key ID and Secret Key used to access api's and within the command line. 
      Cannot be used to access the console.
    - Password, Access Key, and Secret Key can only be viewed once. You can reauto generate them.
 
Groups
  - contains users
  
Roles
  - Are assigned to AWS services

Policies
  - Written in Json
  - Define the permissions used by users, groups, and roles