IAM Flashcards
Service Roles
Every AWS service has an associated role.
Cross Account Roles
Allows IAM users from one of your AWS accounts to access this account.
Identity Provider Role
Allow users from web identity providers to access this account. (Oauth, OpenID, Facebook, Google)
Grant API access to SAML providers.
Roles are Global
You cannot create a regional Role.
Roles assigned to instances
Roles can be assigned to both a running and none running instance.
IAM
Identity and Access Management
What do Policies manage?
1) Users (physical people)
2) Groups (Functions(admins,devs)) & Teams (engineering)
3) Roles. (internal usage within AWS resources)
What is IAM Federation?
Enterprises can integrate their own repository of users with IAM using the SAML standard.