5. IAM 101

It allows you to manage users and their level of access to the AWS Console.

1. Centralized control of your AWS account
2. Shared access to your AWS account
3. Granular Permissions
4. Identity Federation (Including Active Directory, Facebook, Linkedin etc) i.e you can connect with multiple identity providers.
5. MFA
6. Provide temp access for users/devices and services where necessary.
7. Allows you to set up your own password rotation policy
8. Integrates with many different AWS services
9. Supports PCI DSS Compliance

Critical Terms:

1. Users: People
2. Groups: A collection of users under one set of permissions.
3. Roles: You create roles and can then assign them to AWS resources.
4. Policies: A document that defines one or more permissions.