IAM (Identity and Access Management)

IAM is a web service that enables you to securely control access to AWS resources.

With IAM, you can centrally manage permissions that control which AWS resources users can access.

Using IAM, you can centrally manage permissions to control resources.

IAM allows you to control who is authenticated (signed in) and authorized to use resources.

Why is IAM needed? #

IAM is necessary for enterprises to enhance security and improve operational efficiency.

This is because through IAM, you can manage user permissions and manage security through authentication and authorization.

If anyone has the authority to control AWS resources, even if only one account is compromised, there's a risk that the entire system could be hacked.

I believe managing AWS resources with the root account carries significant risk from a security perspective.

Hands-on Practice #

[Practice]
The backend engineer on your new team wants to utilize AWS S3, EC2, RDS, and CloudWatch features for project development. As the root account holder, you need to issue an IAM user for this backend engineer. Create an IAM user with the permissions specified in the problem, provide an ID and password for console login, and share them.
(CloudWatch and EC2 should have ReadOnly access, while RDS and S3 should have FullAccess. If the specified permissions are not available, grant the most similar permissions you can find.)

.. My AWS account is currently suspended. I'll do it later.