AWS学习之路（二）

IAM：Users & Groups

IAM = Identity and Access Management, Global service

Root account created by default, shouldn`t` be used or shared

Users are people within your organization, and can be grouped

 

 IAM：Permissions

Users or Groups can be assigned JSON documents called policies

 

These policies define the permissions of the users

In AWS you apply the least privilege principle: don`t give more permissions than a user needs

IAM Policies inheritance

 

IAM Policies Structure

Consists of "Version, Id, Statement"

Statement consists of "Sid, Effect, Principal, Action, Resource, Condition(optional)"