--- title: AWS IAM — Identity and Access Management | daily.dev description: AWS IAM is a global access management tool provided by AWS. It controls authentication and authorization, and consists of users, groups, permission policies,... canonical: https://daily.dev/posts/aws-iam-identity-and-access-management-5gw9uc3tg twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: AWS IAM — Identity and Access Management | daily.dev og:description: AWS IAM is a global access management tool provided by AWS. It controls authentication and authorization, and consists of users, groups, permission policies,... og:url: https://daily.dev/posts/aws-iam-identity-and-access-management-5gw9uc3tg og:image: https://api.daily.dev/og/posts/5Gw9uC3tg.png og:image:alt: AWS IAM — Identity and Access Management og:image:width: 1200 og:image:height: 630 og:locale: pt --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # AWS IAM — Identity and Access Management **[AWS Builders](https://daily.dev/sources/aws-builders)** · 6 min read · 0 upvotes · 0 comments ## Summary AWS IAM is a global access management tool provided by AWS. It controls authentication and authorization, and consists of users, groups, permission policies, roles, MFA, SSO, etc. IAM policies are written in JSON and have elements such as version, sid, statement, action, effect, resource, and condition. The evaluation logic of IAM policies involves an implicit deny, explicit deny, and allow. Roles in IAM are entities with defined permissions that can be assumed by users or services. RBAC is a traditional role-based access control model, while ABAC is an attribute-based access control model that uses attributes of users, resources, and environments to determine access. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#aws](https://daily.dev/tags/aws), [#cloud](https://daily.dev/tags/cloud), [#iam](https://daily.dev/tags/iam) [View this post on daily.dev](https://daily.dev/posts/aws-iam-identity-and-access-management-5gw9uc3tg) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"AWS IAM — Identity and Access Management","url":"https://daily.dev/posts/aws-iam-identity-and-access-management-5gw9uc3tg","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/aws-iam-identity-and-access-management-5gw9uc3tg"},"datePublished":"2024-05-03T17:08:34.479Z","dateModified":"2025-09-06T02:33:29.423Z","description":"AWS IAM is a global access management tool provided by AWS. It controls authentication and authorization, and consists of users, groups, permission policies,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/930374381a6179a3ce5227880d2b8323?_a=AQAEuiZ","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/930374381a6179a3ce5227880d2b8323?_a=AQAEuiZ","isAccessibleForFree":true,"articleSection":"AWS Builders","inLanguage":"pt","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"AWS Builders","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/bec174adab9a4e66911acbbf460e746d","url":"https://daily.dev/sources/aws-builders"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/aws-iam-identity-and-access-management-5gw9uc3tg","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,cloud,iam","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"AWS Builders","item":"https://daily.dev/sources/aws-builders"},{"@type":"ListItem","position":3,"name":"AWS IAM — Identity and Access Management"}]} ```