This chapter highlighted some of the alternative methods for providing access to your AWS resources for identities that sit outside of the IAM service. Introducing federated access allows you to quickly and easily scale your user base, who might require access to your AWS Management Console, or simply require the ability to run APIs to perform actions against your resources.
Enterprise federation allows you to use your existing corporate identities, such as your Active Directory using SAML 2.0. Social federation allows you to scale to millions of users with the introduction of Amazon Cognito managing this elasticity and control of your token and authentication mechanism.
In the next chapter, we'll be looking at how to secure your EC2 instances through the use of Amazon Inspector, key pairs, and EC2 Systems Manager. We'll also look at how to isolate your instance should it become compromised.
