AWS →I AM part 1

AWS provide two types of user →

1. ROOT user
2. IAM user

ROOT user is one who created the AWS account and have all the permission but if he wanted his employee to have limited permission than he created IAM user account….this was the basic difference you have must to know

Functions of ROOT user →

1. If root is deleted than you will not able to backed up the account
2. It is suggested to not give ROOT account to anyone
3. The account you give to your user is IAM account with limited permission
4. You can create ,block IAM account by root account or Create IAM user for deleting and blocking of IAM account
5. You first sign in with ID and pass to gain all access.
6. Use other IAM user to manage the administrative tasks of your account and securily lock away the root user credentials and use them to perform only a few account and service management tasks.

LIMITATIONS OF IAM

1. you can create 5000 user per AWS account. You can add 10 user at one time.
2. You are only able to create only 300 groups per AWS account.
3. You are limited to 1000 IAM roles under AWS account.
4. Default limits of manage policies to an IAM role and I am user is 10 You can increase the default limits by AWS one request.
5. One IAM user can be a member of 10 group.
6. We can assign 2 access keys to an IAM user → 1.Access key 2.Secret key

FUNCTIONS OF IAM

1. Shared access to your AWS account → You can share IAM account of AWS with limited permission.
2. Granular permission. → Give permission according to the level of your employee such as read only EC2 ,Full EC2 permission, S3 bucket creation, VPC creation. etc….
3. “MFA” Multi factor authentication. provide two level Security used → Google Authenticator.

This is all about part 1 we can see IAM terms in details in IAM PART 2