Release: AWS Identity and Access Management 2010-09-02

New service, new documentation

This is the first release of AWS Identity and Access Management (IAM). IAM offers enhanced flexibility, control, and security when multiple Users are accessing AWS services and business data through a single AWS Account.

AWS Identity and Access Management (IAM) enables you to create multiple Users under a single AWS Account and to manage the permissions for each User within the AWS Account. The centralized management of Users and groups of Users allows you to control who can access specific AWS resources or perform specific operations. Each User is granted unique security credentials, which eliminates the need to share passwords or access keys, and makes it easy to disable access when an individual leaves an organization. For more information, go to http://aws.amazon.com/iam.

User cannot log in to AWS console, portal, or forum

For this release a User created using IAM cannot sign into and utilize other AWS properties including the AWS Management Console and developer forums. This release of IAM does allow you to create all the required credentials for sign in; however the console, portal and forum have not been enabled to recognize a User. For this release a User will only be able to interact with the AWS APIs.

The ability for a User to sign into the management console and manage AWS services will be supported in an upcoming release.

The AWS-wide policy key aws:SecureTransport is not recognized by EC2

EC2 will not correctly accept requests coming in over SSL if the AWS-wide policy key aws:SecureTransport has been defined in the access policy. The call will fail and be closed.