AWS IAM Evolution
Table of contents
IAM
- Identity and Access Management
- Fine Grained Permissions
- Groups, Users , Roles , Policies , Orgs, SCPs
Why not Users?
Roles and user are both identities with permission policies but roles have the flexibility to be assumed by anyone and do not have any access keys associated with them.
•Long term credentials exposure risk
•Extra code for rotation of credentials
•Extra configuration e.g MFA for additional security
IAM Roles
•As always least privilege
•Permission boundary
•Add assume role functionality
•Access Analyzer**
IAM Roles Anywhere
Gives the ability to authenticate and obtain temporary credentials in IAM for workloads running outside of AWS by reusing existing IAM policies and roles
**
SETUP
