AWS: IAM - Identity Access Management
IAM is Global, not for a specific region
Customize your own IAM users sign-in link:
For example:
https://YOUR_NAME.signin.aws.amazon.com/console
Core Fundamentals:
Users
Groups
Roles
Policies
For root user account:
For created aws user accounts:
Active MFA on your root account: 增强账户的安全性
-
Create individual IAM users: 创建AWS用户账户， 两种访问类型。
Use groups to assign permissions: 创建组，并赋予相应的权限（policy），再将用户加入到相应的组中
-
Apply an IAM password policy: 为用户设置密码访问策略
-
Identity Federation：身份联合
