Identity and access management for Amazon RAM - Amazon Resource Access Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Identity and access management for Amazon RAM

Amazon Identity and Access Management (IAM) is an Amazon service that helps an administrator securely control access to Amazon resources. Administrators in IAM control who can be authenticated (signed in) and authorized (have permissions) to use Amazon resources. By using IAM, you create principals, such as roles, users, and groups in your Amazon Web Services account. You control the permissions that those principals have to perform tasks using Amazon resources. You can use IAM for no additional charge. For more information about managing and creating custom IAM policies, see Managing IAM policies in the IAM User Guide.