Summary
In this chapter, we learned about authentication and authorization methods in AWS. We talked about how to authorize users either with username and password or via federation using the IAM service and then authenticating them using IAM policies. AWS Organizations also showed us how we could further restrict the authorization settings using SCPs. We looked at different models of federation with services such as AD, AWS SSO, and Cognito. We also looked at how to securely store secrets as we start to work with our applications using Secrets Manager or SSM Parameter Store.
In the next chapter, we will wrap up our section on AWS fundamentals with a look at the NoSQL service DynamoDB.
