Authentication and authorization in the cloud
Later, all of the team are gathered around Raj’s desk so that he can walk them through the IAM service:
Raj: Okay. Let me first explain some basic concepts first, and then we will address the requirements of the software engineering team.
An account in AWS is a fundamental part of accessing AWS services. Every account has a unique 12-digit number, such as 123456789012, to identify it. This number is randomly assigned by AWS when you sign up for a new account. An AWS account serves two basic functions. First, it acts as a container for the resource you create. When you create an Amazon S3 bucket or an Amazon EC2 instance, you are creating a resource in your AWS account. Every resource gets a unique identifier for itself called an Amazon Resource Name (ARN). Second, it also acts as a security boundary for your AWS resources. Any resource you create is available only to users who have credentials for that...
