Using AWS Identity and Access Management (IAM), you can specify who can access which AWS services and resources, and under which conditions. IAM is a feature of your AWS account and is offered at no additional charge. To get started using IAM or if you have already registered with AWS, go to the AWS Management Console.
How it works
With IAM, you define who can access what by specifying fine-grained permissions. IAM then enforces those permissions for every request. Access is denied by default and access is granted only when permissions specify an "Allow."
IAM video sessions and demos
Learn key IAM concepts by watching expert-led sessions and demonstrations.
IAM tutorials and other resources
Use these end-to-end procedures for common tasks and other helpful resources to get started with IAM:
- Tutorial: Delegate access across AWS accounts by using IAM roles
- Tutorial: Create and attach your first customer managed policy
- Tutorial: Permit users to configure their credentials and MFA settings
- AWS Knowledge Center: Use permissions boundaries to prevent privilege escalation
- IAM User Guide: Getting started
Want to keep learning? See the IAM section in the Knowledge Center and all IAM tutorials in the documentation.
