AWS Identity and Access Management
AWS Identity and Access Management is an AWS service that manages identities and controls authentication and authorization to AWS resources through policies and permissions.
Authorization in Action
AWS Identity and Access Management is a managed AWS service for controlling access to AWS resources through identities, policies, and conditions.
- How it is used
- Controls access to AWS services and resources through identities, policies, API actions, resource identifiers, and contextual conditions.
- How deep it goes
- Explains policy structure, PARC elements, tags, conditions, and a complete S3 scenario, but remains AWS-specific rather than portable.
- Examples
- Uses federated department tags, confidential S3 documents, Lambda tagging, and an s3:GetObject policy with tag-to-tag matching.
- What you can do after
- Operate/configure it to enforce fine-grained, attribute-aware access decisions across AWS services.
Read how Authorization in Action explains AWS Identity and Access Management →
Amazon Web Services in Action, Third Edition: An in-depth guide to AWS
AWS Identity and Access Management is a service for controlling authentication and authorization to AWS resources.
- How it is used
- Controls authentication and authorization for AWS API requests and limits access to AWS resources and service-management actions.
- How deep it goes
- Defines users, groups, roles, and policies, then applies least privilege and explicit denial to RDS and cache administration.
- Examples
- Uses EC2 roles, RDS management policies, destructive-action denial, and layered ElastiCache access controls as concrete examples.
- What you can do after
- Operate/configure AWS access by assigning identities and policies, applying least privilege, and separating service, database, and network permissions.
Related concepts
- AWSuses · Amazon Web Services (AWS) is Amazon's public cloud computing platform, providing on-demand infrastructure and managed services over the internet.
- authorizationkind of · Authorization is the determination and enforcement of rules governing which subjects may access resources or perform operations.
- contractused by · An API contract is a specification of the operations, data, and behavioral expectations that govern interactions between software components.
- Amazon ElastiCacheuses · Amazon ElastiCache is an AWS-managed in-memory caching and data-store service supporting engines such as Redis and Memcached.
- Amazon Relational Database Service (RDS)configures · Amazon Relational Database Service is an AWS-managed service for deploying, operating, and scaling relational databases.
- authenticationproduces · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.