Identity and Access Management

This chapter helps readers to learn what AWS Identity and Access Management (IAM) is and how it sets the foundation for all interactions among the resources in their AWS account. It also covers the various access methods to the AWS IAM services: AWS console, AWS command‐line tools, AWS software development kits, and IAM HTTPS application programming interface (API). Each IAM user has its own username and password that give them access to the AWS Console. Additionally, it’s also possible to create an access key to provide users with programmatic access to AWS resources. AWS Secrets Manager is a managed service that allows developers, IT, and security administrators to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.