Resources to learn more about IAM - Amazon Identity and Access Management
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Resources to learn more about IAM

IAM is a rich product, and you'll find many resources to help you learn more about how IAM can help you secure your Amazon Web Services account and resources.


Consult these resources for creating, managing, and using identities.

Credentials (passwords, access keys, and MFA devices)

Review the following guides to manage passwords, access keys, and MFA devices for your Amazon Web Services account and for IAM users.

For general information about the types of credentials you use to access Amazon Web Services, see Amazon Security Credentials in the Amazon Web Services General Reference guide..

Permissions and policies

Learn the inner workings of IAM policies and find tips on the best ways to confer permissions:

Federation and delegation

You can grant access to resources in your Amazon Web Services account for users who are authenticated (signed in) elsewhere. These can be IAM users in another Amazon Web Services account (known as delegation), users who are authenticated with your organization's sign-in process, or users from an Internet identity provider like Login with Amazon, Facebook, Google, or any other OpenID Connect (OIDC) compatible identity provider. In these cases, the users get temporary security credentials to access Amazon resources.

IAM and other Amazon products

Most Amazon products are integrated with IAM so that you can use IAM features to help protect access to the resources in those products. The following resources discuss IAM and security for some of the most popular Amazon products. For a complete list of products that work with IAM, including links to more information on each, see Amazon services that work with IAM.

Using IAM with Amazon EC2

  • Controlling Access to Amazon EC2 Resources – Describes how to use IAM features to permit users to administer Amazon EC2 instances, volumes, and more.

  • Using instance profiles – Describes how to use IAM roles to securely provide credentials for applications that run on Amazon EC2 instances and that need access to other Amazon products.

Using IAM with Amazon S3

Using IAM with Amazon RDS

Using IAM with Amazon DynamoDB

General security practices

Find expert tips and guidance on the best ways to secure your Amazon Web Services account and resources:

  • Best Practices for Security, Identity, &, Compliance – Find resources for how to manage security across Amazon Web Services accounts and products, including suggestions for security architecture, use of IAM, encryption and data security, and more.

  • Identity and Access Management – The Amazon Well-Architected Framework helps you understand key concepts, design principles, and architectural best practices for designing and running workloads in the cloud.

  • Security best practices in IAM – Offers recommendations for ways to use IAM to help secure your Amazon Web Services account and resources.

  • Amazon CloudTrail User Guide – Use Amazon CloudTrail to track a history of API calls made to Amazon and store that information in log files. This helps you determine which users and accounts accessed resources in your account, when the calls were made, what actions were requested, and more.

General resources

Explore the following resources to learn more about IAM and Amazon.

  • Getting Started Resource Center – Learn how to set up your Amazon Web Services account, join the Amazon community, and launch your first application.

  • Amazon Web Services Support Center – The hub for creating and managing your Amazon Web Services Support cases. Also includes links to other helpful resources, such as forums, technical FAQs, service health status, and Amazon Trusted Advisor.

  • Amazon Web Services Support – The primary webpage for information about Amazon Web Services Support, a one-on-one, fast-response support channel to help you build and run applications in the cloud.

  • Contact Us – A central contact point for inquiries concerning Amazon billing, account, events, abuse, and other issues.

  • Amazon Site Terms – Detailed information about our copyright and trademark; your account, license, and site access; and other topics.