IAM: Identity and Access Management, Global Service
IAM: Permissions
=> Users and Groups can be assigned JSON documents called policies
=> These policies define the permissions of the users
=> don’t give more permissions than a user needs
-
Create Users
-
Name
-
Create Groups
-
Add policies
-
Next
-
Retrieve Users
-
Login with URL or Code
MFA (Multi Factor Authentication)
- To protect Root Accounts and IAM Users
MFA = password you know + security device you own
Main Benefit
- if a password is stolen or hacked, the account is not compromised
What is AWS CLI?
- tool that enables you to interact with AWS Services using commands in CLI
What is the AWS SDK?
- AWS Software Development Kit(AWS SDK)
- Language-specific APIs(set of libraries)
- Enables you to access and manage AWS Services programmatically
aws iam list-users