From the course: Learning Amazon Web Services Lambda

Basics of IAM

- [Instructor] You learned in the previous video that you need to have an Admin User in your AWS account to make it secure. How you do that? In AWS, there is a service that takes care of access management. It is called IAM, and in this video, you will see some of its basic features. What does IAM means? I am stands for Identity Access Management. AWS IAM is a service that controls the access to your AWS resources. IAM helps you to grant access to users and to other services to the different resources of your AWS account. For this video, let's focus on IAM users. All IAM users have some special properties that define the permissions they have for specific resources. Let's look in more detail at what is in there. Groups are a great way to organize your users. If you're working in a team and you want to give the same access to many people, you can add users to groups and then give permissions to the groups. Policies contain the permission that a user or a group has. By default, in AWS, all users and groups are created with no permissions at all. Here is an example of a policy statement. A policy statement is an array of effects, actions, and resources. Let's analyze each of these parts. The effects defines if the policy allows or denies the action. An action describes the API actions that the statement affects. In this example, the policy is only granting access to get data from a DynamoDB table. When working with IAM, AWS recommends that you grant fine grain permissions to your policies. And finally, the policy contains the AWS resource which the policy affects. The resource can be very generic, as in all the AWS resources, or very fine grain, the exact table we want. The more fine grain your permissions are, the more secure your account will be. In the next video, I will demonstrate how to create an IAM user.

Contents