Identity
- AWS allows to create resources or use services for the users who are part of the AWS Account
-
While learning this course we create an AWS Account where you are the owner (root account) and in an organization you are a normal user can perform operations only where you are permitted.
-
Authentication and Authorization
- Authentication refers to user login
- Authorization refers to permissions
-
Authentication Challenges
- Creating AWS Accounts for each user
- Importing Existing users of your organization into AWS.
-
Authorization Challenges
- Fixed Permissions
- Floating Permissions
- Auditing
- Group Permissions
- Environment Permissions.
-
Security Challenges
- Multi Factor Authentication
- Rotating Credentials
- Permissions to
- individuals
- applications
- AWS resources/services (cloud resources)
