> For the complete documentation index, see [llms.txt](https://chxmxii.gitbook.io/aws-ccp/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://chxmxii.gitbook.io/aws-ccp/ima/iam-users-and-groups.md).

# IAM : Users & Groups

Moving forward lets understand IAM - Identity and Access Management

### Summary and Exam essentials : 

* **Users :** mapped to physical user. Normally, IAM users are created in businesses and groups so they don't have the full access. IAM user has a password for AWS Console
* **Groups :** Contains users only, IAM users can be part of multiple groups.
* **Policies :** JSON document that outlines permissions (Allow/Deny) for users or groups
* **Roles :** Are permissions for EC2 instances or AWS services
* **Security :** MFA + Password Policy \
  MFA -> Multi Factorial Authentication 
* **AWS CLI :** manage your AWS services using the command-line
* **AWS SDK :** manage your AWS services using a programming language
* **Access Keys** : access AWS using the CLI or SDK
* **Audit :**

  -> <mark style="color:blue;">IAM Credential Reports :</mark> is just a report that lists all your account's users and status of their credentials.

  -><mark style="color:blue;">IAM access Advisor  :</mark> shows the permissions of a user and when they were last used.
* **IAM policy simulator :** lets you test IAM policies.