AWS IAM role

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html

• IAM roles for EC2 instances
• AWS service roles
• service-linked role

Commands

• aws iam list-roles
• aws iam create-role
• aws iam put-role-policy
• aws iam get-role
• aws iam create-service-linked-role
• aws iam update-role

Errors

• Cannot attach a Service Role Policy to a Customer Role.

STS

• aws sts assume-role-with-saml
• aws sts assume-role

Related

• AWS service roles: https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html
• AWS Policies: AWS trust policy
• Iam:GetRole
• rds-monitoring-role
• AWS IAM federation
• Switch role to acounts: OrganizationAccountAccessRole
• KarpenterNode
• IAM Roles for Service Accounts (IRSA)
• AWS policy: AdministratorAccess
• GCP roles
• IAM roles for EC2 instances
• ecsInstanceRole
• eks.amazonaws.com/role-arn: arn:aws:iam::012345678912:role/AmazonEKS_EBS_CSI_DriverRole
• Inherited from node
• Using service-linked roles for Amazon ECS
• Trusted entities
• AWS IAM Access Analyzer
• AWS managed policies
• Terraform IAM: aws_iam_role

Activities

• Create a role for SAML federation https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_saml.html
• Read https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_compare-resource-policies.html
• Read Creating a role to delegate permissions to an IAM user: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html
• Understand the difference between service role and service-linked role
• How to use trust policies with IAM roles
• Best practices for managing AWS access keys

See also

• AWS IAM role, service roles, service-linked role, AWS IAM Roles Anywhere: IAM roles for EC2 instances, AWSServiceRoleForAutoScaling
• AWS IAM role, ServiceRoleARN, iam:GetRole, assumed-role, sts:AssumeRole, Trusted entities

https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html