AWS Identity and Access Management (IAM) allows users to control access and permissions to the AWS services and resources.
Features include:
Improved security – AWS IAM allows businesses to grant exclusive security authorizations to users and groups to specify which AWS service APIs and resources they can access.
Granular control – AWS allows businesses to manage a user’s access to specific AWS services and resources using permissions.
Temporary credentials - AWS IAM also allows businesses to create roles that enable users to describe a set of authorizations and then permit authenticated users or EC2 instances assume them.
Analyze access – AWS helps businesses to examine access across their entire AWS environment. It allows all the security personnel to use IAM Access Analyzer to recognize resources that can be accessed from external an AWS account.
Flexible security credential management – AWS IAM enables businesses to validate users in several ways, depending on how they want to use AWS services.
Leverage external identity systems – The solution allows users to leverage IAM to provide the employees and applications access to the AWS Management Console and to AWS service APIs, with the help of the current identity systems.