Module 02: Resources

Official Documentation

IAM Overview and Core Concepts

• What Is IAM?
• IAM Identities (Users, User Groups, and Roles)
• Policies and Permissions in IAM

IAM Users and User Groups

• IAM Users
• Create an IAM User in Your AWS Account
• IAM User Groups

IAM Policies: Managed and Inline

• Managed Policies and Inline Policies
• AmazonS3ReadOnlyAccess (AWS Managed Policy Reference)

IAM Policy Structure and Elements

• IAM JSON Policy Element Reference
• IAM JSON Policy Elements: Effect
• IAM JSON Policy Elements: Action
• IAM JSON Policy Elements: Resource
• IAM JSON Policy Elements: Condition
• IAM Condition Operators

Policy Evaluation Logic

• Policy Evaluation Logic

IAM Roles, Instance Profiles, and AWS STS

• IAM Roles
• IAM Role Creation
• Use Instance Profiles
• AWS Security Token Service API Reference

IAM Security Best Practices

• Security Best Practices in IAM
• AWS Multi-Factor Authentication in IAM
• Set an Account Password Policy for IAM Users
• Manage Access Keys for IAM Users

IAM Access Analyzer and Policy Simulator

• Using AWS IAM Access Analyzer
• IAM Policy Testing with the IAM Policy Simulator

AWS Organizations and Service Control Policies

• What Is AWS Organizations?
• Service Control Policies (SCPs)

Shared Responsibility Model (Referenced from Module 01)

• Shared Responsibility Model (AWS Risk and Compliance Whitepaper)

AWS CloudShell (Used in Lab)

• What Is AWS CloudShell?

AWS Whitepapers

• AWS Risk and Compliance: Shared Responsibility Model: Defines the division of security responsibilities between AWS and the customer. Referenced in Module 02 to explain how IAM is the primary tool for fulfilling the customer side of the Shared Responsibility Model.

AWS FAQs

• AWS IAM FAQ

AWS Architecture References

No specific architecture references for this module. IAM is a foundational service that applies across all architectures. Architecture patterns that use IAM roles, policies, and cross-account access are introduced in later modules.

AWS Bootcamp: From Novice to Architect Author: Samuel Ogunti License: CC BY-NC 4.0