AWS: IAM - Identity Access Management

IAM is Global, not for a specific region

Customize your own IAM users sign-in link:
For example:

https://YOUR_NAME.signin.aws.amazon.com/console

Core Fundamentals:

Users
Groups
Roles
Policies

For root user account:

For created aws user accounts:

Active MFA on your root account: 增强账户的安全性

-

Create individual IAM users: 创建AWS用户账户， 两种访问类型。

Use groups to assign permissions: 创建组，并赋予相应的权限（policy），再将用户加入到相应的组中

-

Apply an IAM password policy: 为用户设置密码访问策略

-

Identity Federation：身份联合