Manages access of AWS users and resources.
It is a universal system. Applied to all regions at the same time. IAM is a free service.s
Consists of four different components, with three of them being identities:
End users who log into the console or interact with AWS resource programmatically.
Group up your Users so they all share permissions levels of the group.
e.g. Admin, Dev, Auditors, …
Associate permissions to a Role and then assign this to an User, Service or Group
Holds Policies
Can be applied to various AWS resources
JSON documents which grant permissions for a specific IAM Identity to access services.