Previous in AWS
← AWS Global Services Explained: Route 53 and IAMIAM Deep Dive: Users, Groups and Policies
May 30, 2026
IAM Deep Dive: Users, Groups and Policies
Introduction
IAM (Identity and Access Management) controls who can access AWS resources and what actions they can perform.
Root User
When an AWS account is created, a Root User is automatically created.
Best practice: do not use the Root User for everyday activities.
IAM Users
An IAM User represents a person or application requiring AWS access.
IAM Groups
Groups help manage permissions efficiently.
Important: Groups cannot contain other groups.
IAM Policies
Policies define permissions using JSON.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowS3Read",
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::my-bucket/*"
}
]
}
Understanding Policy Components
| Component | Description |
|---|---|
| Sid | Statement Identifier |
| Effect | Allow or Deny |
| Action | API operations allowed |
| Resource | Resource affected |