IAM

• IAM is a Global service (No region selected)
• root account - should not be used or shared
• Group - Developers, Operations
• Groups can only contain users not other groups
• A user can belong to multiple groups

Policies

Defining Policies like so

{

"id":"S3-Account-Permissions",

"Statement" :[
{

"Sid":"1",

"Effect":"Allow",

"Principal": {

"AWS":["arn:aws:iam:123454:hitesh"] 

},

"Action":[

"s3:GetObject",

"s3:PutObject"

],

"Resource":"*"

}

]

}

Users

1. Create users

2. Create an admin user from the root user

3. Autogenerate password and change it in nxt sign in

4. Add permission - directly to user

5. OR(Better) create a group , provide permissions to the group and add user to it

   

MFA

• Password You know, device you own