Now we will look at the anatomy of IAM and see how it works. In AWS, IAM consists of six elements:
- Principal
- Request
- Authentication
- Authorization
- Actions
- Resources
Let's understand what all these six elements are:
- Principal: Principal is an entity that performs some action on AWS resources. It is basically an Amazon Resource Name (ARN) such as Principal": { "AWS": "arn:aws:iam:: 202785070987:root" }. It means that all the users, roles, groups, and federated applications are principals, as they all are responsible for performing an action on AWS resources.
- Request: When principal wants to perform an action, it actually sends a request to AWS. Here, a request consists of the following:
- Who is going to perform an action (that is, information about principal)
- Which action will be performed...
