From the course: AWS Administration: Security Fundamentals

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Understanding IAM roles

Understanding IAM roles

- [Instructor] An IAM role is a really important concept to understand. And after you take a look at this lecture, take a look at the demonstration of creating a role to cement what this concept is. Ultimately we're defining permissions using an IAM role, but an IAM role is just a permission policy. So there's no security hole by defining an IAM role and then not assigning that role to an IAM user or to an application or to an externally authenticated user. Once I attach the role to an entity such as an IAM user or an externally authenticated user, and that role is used, there has to be a conversation with the security system at AWS from the entity that wants to assume that role. Let's put this into English. That entity that wants to carry out a task now and they have our permission policy and they would like to assume this role. They want to be delegated the permissions for a period of time. Once we get through the…

Contents