Please enable JavaScript.

Coggle requires JavaScript to display documents.

IAM, AWS Directory Service, IAM Policies, AWS Resource Access Manager…

- - - - AWS
        
        Multi-AZ deployment
        
        Patch, monitor, recover
        
        Instance rotation
        
        Snapshot and restore
      - Customer
        
        Users, groups, GPOs
        
        Standard AD tools
        
        Scale out DCs
        
        Trusts (resource forest)
        
        Certificate authorities (LDAPS)
        
        Federation
- - - - Managed Microsoft AD (a.k.a, Directory Service for Microsoft Active Directory)
      - AD Connector
      - Simple AD
    - - Cloud Directory
      - Cognito user pools
- - - - A policy document is a list of statements
      - :zap:
        
        Each statement matches an AWS API request
        
        Effect
        
        Allow
        
        Deny
        
        Actions
        
        Matched based on their Action
        
        Resource
        
        the Action is against
- - - - :one: aws|aws-cn
      - :two: s3|ec2|rds
      - :three: us-east-1|eu-central-1
      - :four: 123456789012
  - - - arn:aws:iam::123456789012:user/mark
    - - arn:aws:s3:::my_awesome_bucket/image.png
    - - arn:aws:dynamodb:us-east-1:123456789012:table/orders
    - - arn:aws:ec2:us-east-1:123456789012:instance/*
- - - - Individual Accounts
      - AWS Organization
  - - - App Mesh
      - Aurora
      - CodeBuild
      - EC2
      - EC2 Image Builder
      - License Manager
      - Resource Groups
      - Route 53