Basics of IAM

  • A web service that helps you control access to AWS resources.

  • Use it to control who is authenticated (signed in) and authorized (has permissions) to use resources.

  • When you first create an AWS account, you begin with a single sign-in identity that has complete access to all AWS services and resources in the account.

    • This identity is called the AWS account root user.

  • AWS strongly recommend that you do not use the root user for your everyday tasks, even the administrative ones.

  • Securely lock away the root user credentials and use them to perform only a few account and service management tasks.

Last updated