👤 IAM Users
Each IAM user should be mapped to a real person in your company.
Users get a password for accessing the AWS Console.
👥 User Groups
Users can be grouped into groups.
This makes permission management easier and scalable.
📜 Policies
Attach policies to users or groups.
Policies are JSON documents that define permissions.
🎭 IAM Roles
Roles are identities for AWS services like EC2 or Lambda.
They allow services to access resources securely.
🔐 Security Best Practices
Enable MFA (Multi-Factor Authentication) for all users.
Set a strong password policy to protect accounts.
💻 CLI & SDK Access
Manage AWS services programmatically using:
CLI (Command Line Interface)
SDK (Software Development Kits) for programming languages
🗝️ Access Keys
Create access keys for programmatic access via CLI or SDK.
Treat them like passwords — keep them secret.
📊 Audit & Monitoring
Use IAM Credentials Report to audit users and keys.
Use Access Advisor to check which services users are actually using.