Please enable JavaScript.

Coggle requires JavaScript to display documents.

IAM (Users and Groups (IAM Users (a new user has implict deny for all AWS…

- - - - The user created whern an AWS account is created
      - The Credentials are the email and password used to sign upfor ano AWS account
      - By default the 8root account has full administrative rights and access
    - - Root user should not be used for daily work and administration
      - root should not have access keys - delete them if they exist
      - MFA should always be enables for root user
- - - - Administrator access: full access to all AWS resources
      - Power User Access: Admin access but denies user and group management
      - Read-only access: only view AWS resources
- - - - AWS Resources
      - External aws user
  - - - provides access to another AWS user from another account
    - - Users outside AWS can assume a role for temporary access to AWS account and resources
      - These users assume an Identity Provider access role
        
        Examples: Active Directory
        
        Single sign on providers, like facebook, google or amazon