iAM

Question 1

Is a global service. User is single entity. Groups only contain users

Answer 1

iAM Users and Groups

Question 2

Is attached a policy which defines the access control to a resource
Structure is Effect (Allow/Deny), Action(API calls), Resource (What resource access is allowed)

Answer 2

iAM Policies

Question 3

Used by AWS services to access resources on users behalf. Permissions are assigned to the iAM role in order to do that.E.g. - EC2 instance roles, Lambda function roles, CloudFormation roles

Answer 3

iAM Role

Question 4

1. Add new role
2. Choose the AWS service like EC2, Lambda, etc…
3. Attach a policy

Answer 4

iAM Role application