AWS Security Blog
Author: Jim Scharf
Securing Access to AWS Using MFA–Part 2
In part I of our series on multi-factor authentication (MFA), we mentioned that the next topic would be securing access to AWS APIs with MFA. This week’s guest blogger Kai Zhao, Product Manager on our AWS Identity and Access Management (IAM) team, will give a brief overview of AWS MFA-protected API access. Introduction MFA-protected API […]
Understanding the API Options for Securely Delegating Access to Your AWS Account
Thinking about building a secure delegation solution to grant temporary access to your AWS account? This week’s guest blogger Kai Zhao, Product Manager on our AWS Identity and Access Management (IAM) team, will discuss some considerations when deciding on an approach: Introduction Using temporary security credentials (“sessions”) enables you to securely delegate access to your AWS environment […]
Writing IAM Policies: How to Grant Access to an Amazon S3 Bucket
February 20, 2025: This post was republished to reflect the updated least privilege permissions necessary for read-write access to Amazon S3. In this post, we’ll address a common question about how to write an AWS Identity and Access Management (IAM) policy to grant read-write access to an Amazon S3 bucket. Doing so helps you control who can access […]
Securing Access to AWS Using MFA–Part 1
In this series of blog posts, we’ll walk through different ways to keep your AWS resources secure using AWS Multi-Factor Authentication (MFA). As a best practice, we strongly recommend that you secure access to your account with AWS MFA. It’s a simple way to add an extra layer of protection on top of your username […]