AWS Basics · Module 02

IAM – Identity and Access Management

Manage identities, policies, MFA, roles, and AWS access auditing.

Practice interactively →

What you will learn

• Distinguish root, IAM users, groups, and workforce identities
• Read policy JSON and explain permission evaluation
• Protect sign-in with a password policy and MFA
• Use roles and temporary credentials for services or cross-account access
• Audit credentials and service access under least privilege

Lessons

1. Root, Users, and Groups

   Use root, IAM users, and groups correctly under least privilege.

2. IAM Policies and Permission Evaluation

   Read policy JSON and apply default deny, Allow, and explicit Deny.

3. Password Policy and MFA

   Strengthen sign-in with password policy and phishing-resistant MFA.

4. IAM Roles for Services

   Grant temporary credentials to services and cross-account access with roles.

5. IAM Security and Audit

   Audit credentials, reduce permissions, and apply current best practices.