AWS Identity and Access Management (IAM) Foundations

Explore the role of AWS identity and access management, including user accounts, granular permissions, MFA, logging with CloudTrail, and access via the management console, CLI, SDKs, and APIs.

Explore how IAM works through six elements: principles, authentication, request, action, resources, and authorization, driven by policies and permissions for principals such as users and roles.

Discover the IAM user concept, including name and credentials, how root differs from IAM users, with policies and authentication methods like console passwords and SSH keys.

Explore IAM user management by viewing IAM user access, deleting, renaming, and changing permissions for IAM users, including John in the Admin Group.

Learn to view user access history with the IAM access advisor, inspect services and policies for users, groups, and roles, and safely list or delete accounts.

Learn to manage IAM user permissions by adding to groups, copying permissions, attaching policies directly, or setting permission boundaries, with hands-on guidance.

Create a new IAM user, enable programmatic and console access, and copy permissions from an existing user to the new one, so Bob inherits John’s admin group and admin rights.

Attach a custom S3 policy to an IAM user using the visual editor or Json, review the policy, and attach it to Bob for full S3 access.

Learn how IAM groups bundle users to manage permissions, how groups inherit policies, and how an example organization structures administrators, developers, and test groups with tailored access.

Perform a hands-on demonstration of IAM group administration, including listing groups, renaming, deleting groups, adding and removing users, and attaching policies to groups.

Create groups developers and test, attach EC2 full access, CodeBuild developer access, and ECS full access, then create users Kelly, Kim, and Bill and assign them to their groups.

Explore how AWS policies grant access by attaching identity-based or resource-based policies to IAM users, groups, or resources. Learn about JSON documents, the six types, and inline policies.

Create and apply inline policies to IAM users in the AWS management console, granting S3 list and read access for all resources.

Create a custom inline JSON policy for Sam, granting get and put access to all S3 buckets during the April 13, 2021 to June 6, 2021 window.

Create an iam user named Sam with programmatic and console access, then attach a custom Json inline policy for s3 full access, review the policy, and save the access keys.

explains what iam roles are and how they function as identities tied to policies, granting temporary credentials for applications or users to access resources, including cross-account access and ec2 actions.

Learn to create and attach an iam role that lets an ec2 instance access s3 with amazon s3 full access, demonstrating trusted entities and practical usage.

Explore IAM authentication across console and programmatic access, implement MFA, manage keys securely, and apply least privilege with roles, groups, policies, and temporary credentials via STS.

Learn how to rotate IAM access keys for any IAM user, checking key age and activity, deleting or deactivating old keys, and creating new keys to keep accounts secure.

Explore how AWS uses multi-factor authentication (MFA) with knowledge, possession, and inheritance categories, including virtual MFA apps like Google Authenticator and hardware keys such as Yubikey, detailing the login flow.

Create and download an AWS IAM credentials report, then review user names, ARNs, creation dates, password and access key rotation, and MFA status to ensure compliance.