IAM Users and Groups
Create IAM users, organise them into groups, and assign group-level permissions to simplify access management.
What Is AWS IAM?
AWS IAM controls who can sign in and what they're allowed to do. It's free and built on three pieces: users, groups, and roles. 🔐
IAM Users: Individual Identities
An IAM user is one person or app. It can have a console password to log in by hand, plus access keys for code. Best practice: always turn on MFA.
# Create a new IAM user
aws iam create-user --user-name alice
# Create console access (requires setting login profile)
aws iam create-login-profile \
--user-name alice \
--password 'Temp@1234!' \
--password-reset-requiredAll lessons in this course
- IAM Users and Groups
- IAM Roles and Policies
- Least-Privilege Principle
- IAM Best Practices and MFA