> For the complete documentation index, see [llms.txt](https://amartyushov.gitbook.io/tech/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://amartyushov.gitbook.io/tech/platforms/aws/iam.md).

# IAM

## IAM (Identity & Access Management)

Where you manage who has access to your AWS account and what resources they can use.

Manages

* Users
* Groups
* Roles
* IAM access policies

User may be a member of up to 10 groups.

**Best practice** is to assign policies to the group and add/delete users to groups.

It is not possible to assign a policy to the Service (e.g. EC2). In this case in order to grant EC2 access to e.g. S3 => **assign a role** to EC2. And role will have a policy to access S3.