IAM(Identity Access Management)
Categories: AWS(Amazon Web Services)
1.AWS Security Center
Users—Create Users
Groups- DevOps , DevTeam, Marketing Team
Roles- Admin ,ELB Admin etc.
Policies- Polices for users, Permissions
Identify Providers
Account Setting
2.Root Account never be user and shared
3.Should Create User and with proper permission for access.
4.IAM is center of AWS.
5.Policies written in JSON format.
6.IAM has a global view.
7.Permission is governed by policies.
8.MFA (Multi Factor Authentication) can be setup
1. Virtual MFA Device -Mobile or Computer.
2.U2F security key- YubiKey
3. Other h/w MFA device e.g. Gemalto Token.
9.IAM has Predefined manage policies.
Recap
One IAM user per physical person.
One IAM role per application.
IAM credentials should not be shared.
Don’t write credentials in code.
Never us root account expect initial setup.
We can set password policy.