IAM user
Identity for a person/application.
Public flashcard set
AWS IAM & Security
Identity basics for certs.
aws cloud security
Flashcards
IAM group
Collection of users with shared permissions.
IAM role
Identity assumable with temporary creds.
Policy
JSON document of permissions.
Least privilege
Grant only needed permissions.
MFA
Multi-factor authentication.
Root user
Account owner; avoid daily use.
Access key
Long-term programmatic credentials.
STS
Security Token Service for temporary creds.
KMS
Key Management Service for encryption keys.
CloudTrail
API activity audit logs.
GuardDuty
Threat detection service.
WAF
Web application firewall.
Secrets Manager
Store and rotate secrets.