IAM

Question 1

Can IAM user groups be part of other user groups?

Answer 1

No

Question 2

what is IAM database authentication?

Answer 2

a way to connect to your Amazon RDS (Relational Database Service) instances without needing to use traditional database passwords. Instead, it uses AWS Identity and Access Management (IAM) to verify your identity.

Question 3

what is the difference between an IAM role, an IAM execution role, and an IAM resource based policy?

Answer 3

An IAM role can be assigned to a user or service to perform actions on resources.
An IAM execution role is directly tied to an AWS service and grants that service permissions to access other resources
an IAM resource based policy is attached directly to a resource to control who can interact with it