AWS·AWS essentials

IAM

IAM controls who can call which AWS API.

Beginner 10 min read Lesson 1 of 150 Challenge included
What you will be able to do
  • Use roles for compute.
  • Grant least privilege.
  • Never embed access keys.

In plain English

IAM controls who can call which AWS API.

  • Use roles for compute.
  • Grant least privilege.
  • Never embed access keys.
terminalTerminal
aws sts get-caller-identity
aws iam list-roles --max-items 5
Your turn

Explain it back

Easy

Answer from memory: What should compute use instead of long-lived keys?

TEXT · starter
Your answer…
Check your understanding before moving on.
Knowledge checkQuestion 1

What should compute use instead of long-lived keys?

Select an answer to continue
Study tools

Make it yours.

Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.

Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign in
Finished reading?

Lock in what you just learned.

Mark this lesson complete to save your place and move one step closer to the certificate.

Next: Compute
Lesson 1 of 150 · 0% of course