User permissions and access

User permissions and access

1. AWS account root user

   • Owner of the AWS account
     • All permissions
   • Access and control any resource in the account
   • Control acess
     • Explicitly give the user permission

2. Multi-factor authenticationm (MFA)

   • Ensure that you need not only the email and pass
     • Also a randomized token to log in

3. AWS Identity and Access Amagement (AWS IAM)

   • IAM users
     • default no permissions
       • can't even log into AWS account
     • Principle of least privilege
       • A user is granted access only to what they need
     • IAM policy
       • JSON document
         • describes what API calls a user can or cannot make
         • Permission statement
           • Effect
             • Allow/Deny
           • Action
             • Any AWS API call
           • Resource
             • Which AWS resource the API call is for

4. IAM groups

   • groupings of users
     • Attach a policy to a group

5. Roles

   • Roles at work changes and is temporary
   • Associated permissions allow or deny specific actions
   • No username or password
   • Access to temporary permissions
     • AWS resources
     • Users
     • External identities
     • Applications
     • Other AWS services