From the course: AWS Essential Training for Developers

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Putting together all of the IAM resources

Putting together all of the IAM resources

- [Instructor] Now that we've seen what a role can do, let's put together all the concepts we've learned so far about identity and access management. It has a lot of terms that sound similar and it can get confusing. IAM is always controlled by the AWS global region, which is a special region within AWS that just means that these settings and services aren't tied to a specific region. IAM resources are different from your regular AWS resources, like your EC2 instances or VPCs. Your root account sits off to the side, and it's not an IAM resource, but you can have an IAM group, IAM users, and the S3 grant for EC2 role we just created. Groups, users and roles fall under the label of IAM identities. IAM entities are the users and roles that want access to AWS resources. A group will never access AWS services directly. It's the users inside that group that will want access to things. So a group is not an entity…

Contents