https://blog.corneschi.ro/tags/iam/Recent content in Iam on Daniel CorneschiHugoenDaniel CorneschiSun, 18 Oct 2026 13:58:11 +0300https://blog.corneschi.ro/posts/aws-iam-concepts-guide/Sun, 18 Oct 2026 12:00:00 +0300https://blog.corneschi.ro/posts/aws-iam-concepts-guide/<p>IAM fundamentals — roles, policy types, evaluation logic, Identity Center (SSO), federation, temporary credentials, permission boundaries, and root account vs admin user.</p> <h2 id="best-practices">Best Practices</h2> <ul> <li>Never use the root account for day-to-day tasks</li> <li>Enable MFA for all human users (especially root)</li> <li>Apply least privilege: grant only the permissions needed</li> <li>Use groups to assign permissions instead of attaching policies directly to users</li> <li>Rotate access keys regularly and remove unused credentials</li> <li>Use roles for applications and services (never embed long-term credentials in code)</li> <li>Use AWS Organizations SCPs for guardrails across accounts</li> </ul> <h2 id="roles">Roles</h2> <p>A role is an AWS identity with permission policies. Unlike users, roles don&rsquo;t have permanent credentials — they&rsquo;re assumed temporarily by:</p>