0 views0
Comments
By
AWS IAM
AWS IAMAWS IAM
AuthenticationWhat is AWS IAM?
It enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.
AWS IAM is a tool in the Authentication category of a tech stack.
Key Features
Manage IAM users and their access - You can create users in IAM, assign them individual security credentials (i.e., access keys, passwords, and Multi-Factor Authentication devices) or request temporary security credentials to provide users access to AWS services and resources.Manage IAM roles and their permissions - You can create roles in IAM, and manage permissions to control which operations can be performed by the entity, or AWS service, that assumes the role. You can also define which entity is allowed to assume the role.Manage federated users and their permissions - You can enable identity federation to allow existing identities (e.g. users) from your corporate directory or from a 3rd party such as Login with Amazon, Facebook, and Google to access the AWS Management Console, to call AWS APIs, and to access resources, without the need to create an IAM user for each identity.
AWS IAM Pros & Cons
Pros of AWS IAM
- ✓Centralized powerful permissions based access
- ✓Straightforward SSO integration
Cons of AWS IAM
- ✗Cloud auth limited to resources, no apps or services
- ✗No equivalent for on-premise networks, must adapt to AD
AWS IAM Alternatives & Comparisons
What are some alternatives to AWS IAM?
Auth0
A set of unified APIs and tools that instantly enables Single Sign On and user management to all your applications.
Keycloak
It is an Open Source Identity and Access Management For Modern Applications and Services. It adds authentication to applications and secure services with minimum fuss. No need to deal with storing users or authenticating users. It's all available out of the box.
JSON Web Token
JSON Web Token is an open standard that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed.
