# Identity and Access Management for zonal shift in ARC
<a name="security-iam-zonalshift"></a>

Amazon Identity and Access Management (IAM) is an Amazon Web Services service that helps an administrator securely control access to Amazon resources. IAM administrators control who can be *authenticated* (signed in) and *authorized* (have permissions) to use ARC resources. IAM is an Amazon Web Services service that you can use with no additional charge.

**Topics**
+ [How zonal shift works with IAM](security_iam_service-with-iam-zs.md)
+ [Permissions for zonal shift](security_iam_service-with-iam-zonal-shift.md)
+ [Identity-based policy examples](security_iam_id-based-policy-examples-zonal.md)