Leveraging Access Delegation

You are now going to investigate access delegation. Access delegation is essentially used for the following reasons:

• Providing an entity temporary access to resources that they do not have access to with their current privileges. This could be one of the following:
  • A user that needs temporarily elevated privileges to perform a specific task
  • An application or AWS service that requires specific privileges
• Providing an entity access to resources located in another AWS account.

Now, start by examining these cases.

Temporary Access Delegation

Take for instance, the first use case where you need to provide trusted users, applications, or AWS services with temporary security credentials so that they can access your AWS resources. As the name implies, the security credentials that will be provided are temporary, which has the following benefits:

• The access provided is limited to a short period of time, typically ranging from a few...