In AWS, IAM is available as a service that is global in scope. Here, global means the usage scope of IAM is global; it is defined once and can be used across all the AWS regions. It's not a region-specific service.
IAM provides the following features:
- Shared or cross-account access: Using IAM, you can permit other users to administer your AWS services and can also allow users in other AWS accounts to manage your AWS services without passwords or access keys.
- Component level permission: In IAM, you can define access policies on a component level. Suppose that if you have allowed a user to access only one S3 bucket, he/she won't be able to access other services and other S3 buckets.
- Secure access of services to an application that runs on EC2 or ECS: Let's assume that we have a web server running on an AWS EC2 instance and the static content is stored...
