AWS Identity and Access Management (IAM)

By -
AWS Identity and Access Management (IAM) allows you to securely control access to AWS services and resources for your users. With IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources. IAM allows you to control who in your organization has access to which AWS services and resources.

IAM is a feature of AWS that allows you to create users and groups within your AWS account, assign permissions to those users and groups, and use credentials to allow and deny access to resources like EC2 instances, S3 buckets, Lambda functions and more. With IAM you can centrally manage users, security credentials like access keys, and permissions to help ensure secure access to AWS resources. 

When you first create an AWS account, you begin with a single sign-in identity that has complete access to all AWS services and resources in the account. Using IAM, you can add additional users to your AWS account, without having to share your credentials. You can grant each user unique permission to access only those resources required for their work.

IAM enables you to:

- Create users within your AWS account to allow access to resources 
- Add users to groups to assign permissions to whole groups of users at once
- Create policies to allow or deny permissions to particular actions or resources
- Use identity-based policies or resource-based policies to assign permissions
- Use managed policies, customer managed policies or inline policies based on your needs
- Set up multi-factor authentication (MFA) for additional security on root or IAM user accounts
- Allow users to access AWS resources through the AWS Management Console, CLI or API operations

Comments

Post a Comment

Popular posts from this blog

Getting Started with Amazon Athena

By -
Image
Amazon Athena is an interactive query service that makes it easy to analyze data directly in Amazon S3 using standard SQL. Athena is serverless, so there is no infrastructure to manage, and you pay only for the queries that you run. With Athena, data analysts, scientists, and developers can directly query datasets stored in Amazon S3 to gain insights without having to load the data into databases or maintain databases. Athena allows you to analyze large datasets in Amazon S3 using standard SQL. With just a few clicks in the AWS Management Console, you can point Athena at your data stored in S3 buckets and start querying it using standard SQL. You don't need to set up any infrastructure or load your data into databases. You pay per query with no setup costs. Athena scales automatically—running queries on petabytes of data is as easy as querying gigabytes of data. It's even integrated with business intelligence (BI) tools like Tableau, QuickSight, and Microsoft Power...
Read more

Getting Started with AWS Config

By -
Image
AWS Config provides a detailed view of the configuration of AWS resources in your AWS account. It allows you to view configuration history, detect unauthorized configuration changes, and evaluate your resources' compliance against rules and best practices. AWS Config continuously monitors and records configuration changes to your AWS resources. This allows you to understand their relationships and how they are configured over time.  With AWS Config, you can enable recording of configuration changes for supported resource types like EC2 instances, S3 buckets, Lambda functions, and more. It will build a configuration history for each of your resources. You can then write rules to evaluate if a resource is compliant or non-compliant based on certain configurations. For example, you could write a rule to detect if a S3 bucket doesn't have versioning enabled. AWS Config will then evaluate all your S3 buckets and report any that don't meet the requirement. Some key b...
Read more