7. AWS Access Management Capabilities

7. AWS Access Management Capabilities

1. Identity and access management

   • Access from service to service in AWS
   • Multi-factor authentication (MFA)
   • Identity federation
   • Identity information for assurance
   • PCI DSS compliance
   • Integration
   • Eventually consistent
   • Always free
   • Accessibility options

2. Main identities

   • AWS account root user
   • Users
   • Groups
   • Roles

3. Best practices with IAM

   • Store root user access keys securely
   • Create individual IAM users
   • Use groups to assign permissions to IAM users
   • Use AWS-defined policies for permissions
   • Grant least privilege
   • Review IAM permissions
   • Always configure a strong password policy for your users
   • Enable multi-factor authentication for privileged user accounts
   • Use roles
   • Use roles to delegate permissions
   • Do not share access keys
   • Rotate credentials
   • Remove unnecessary credentials
   • Use policy conditions
   • Monitor, monitor, monitor