Summary
In this chapter, you have learned about the AWS IAM service. AWS IAM offers authentication and authorization services to allow you to define who or what can access your AWS accounts, its services, and resources. You have covered the concepts of IAM users, groups, and roles, and how these features of IAM can help you address different access requirements.
Amazon Cognito was also discussed, which allows you to build an authentication and authorization service for your web and mobile applications. With Amazon Cognito, you can create a user pool to host your own user directory or federate with external IdPs such as those that are OIDC and SAML 2.0 compatible.
Finally, we looked at the new AWS Identity Center, which is a more streamlined process of managing your workforce identities and offers SSO features with external IdPs, such as Microsoft AD.
In the next chapter, we introduce you to the different types of storage services and specifically focus on Amazon S3, which...
