AWS Identity and Access Management

Amazon in 2012 introduces AWS Identity and Access Management (IAM) for EC2 . In February introduced Managed Policies by AWS and since November 2016 there are 10 different policies bases on job functions: AdministratorAccess (This policy grants full access to all AWS services, similar to root role in Unix systems), Billing, Data Scientist, Database Administrator, Developer Power User, Network Administrator, Security Auditor, Support User, System Administrator and View Only User

Examples policies

• aws:RequestedRegion (April 2018)
• iam:ChangePassword
• arn:aws:iam::aws:policy/ReadOnlyAccess

Activities

• Read https://stackoverflow.com/questions/tagged/amazon-iam?tab=Votes
• Granting access to your billing information and tools
• Using temporary credentials with AWS resources: aws sts get-session-token

News

• Nov 2022 assign multiple MFA devices in IAM https://aws.amazon.com/blogs/security/you-can-now-assign-multiple-mfa-devices-in-iam/
• Dec 2019 AWS IAM Access Analyzer
• Feb 2015 AWS Security Token Service (STS)
• Oct 2013 AWS IAM policy simulator

See also

• IAM: AWS IAM Identity Center, AWS Identity and Access Management, Google Cloud IAM, Azure IAM, SailPoint, CyberArk, CIAM, ForgeRock, iam:ChangePassword, aws iam, AdministratorAccess, Context keys, IAM Access Analyzer, AWS policy, AWS managed policies, IAMUserChangePassword, AWS Roles, List of AWS policies, Resource-based policy, aws-iam-authenticator, IRSA, RDS Authentication, AccessDenied

https://en.wikiversity.org/wiki/Cloud_computing/Amazon_Web_Services/Identity_and_Access_Management

https://aws.amazon.com/blogs/aws/new-managed-policies-for-aws-identity-access-management/

https://aws.amazon.com/blogs/security/how-to-assign-permissions-using-new-aws-managed-policies-for-job-functions/

https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_job-functions.html

https://aws.amazon.com/es/blogs/security/easier-way-to-control-access-to-aws-regions-using-iam-policies/