# KodeKloud: Beta Courses AWS - IAM

## AWS - IAM

### Introduction

- [Course Introduction](https://notes.kodekloud.com/docs/AWS-IAM/Introduction/Course-Introduction/page.md): This course provides hands-on experience and best practices for managing AWS Identity and Access Management (IAM) to secure cloud access and permissions.

### Introduction to AWS Identity and Access Management

- [IAM Overview](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/IAM-Overview/page.md): Overview of AWS Identity and Access Management for managing permissions and access control in the AWS Cloud.
- [AWS Account](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/AWS-Account/page.md): This article explains how to create an AWS account and highlights the benefits of using AWS services.
- [Demo Creating AWS Account](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-Creating-AWS-Account/page.md): This tutorial explains how to set up a new AWS account specifically for an HR team.
- [IAM Users](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/IAM-Users/page.md): Learn to set up IAM users and manage their access to AWS services through the Management Console, AWS CLI, or SDKs.
- [Demo Create IAM User](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-Create-IAM-User/page.md): This tutorial teaches how to create an IAM user in AWS, verify console access, and configure AWS CLI credentials.
- [AWS CLI and SDK](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/AWS-CLI-and-SDK/page.md): Learn to streamline AWS workflows using the AWS CLI and SDKs, covering IAM user creation, CLI configuration, SDK integration, and permission management.
- [Demo IAM Groups](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-IAM-Groups/page.md): This tutorial teaches how to create IAM groups in AWS, attach policies, and add users for specific access permissions.
- [IAM Policies and Permissions](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/IAM-Policies-and-Permissions/page.md): This article explains IAM policies and permissions in AWS, focusing on the Principle of Least Privilege and how to define and manage access controls.
- [Demo Identity Policy](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-Identity-Policy/page.md): This tutorial teaches how to create a custom IAM identity policy in AWS and manage permissions for a user group.
- [IAM Resource Based Policy](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/IAM-Resource-Based-Policy/page.md): This article explains IAM resource-based policies in AWS, focusing on S3 bucket policies and their key components.
- [Demo Resource Based Policy](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-Resource-Based-Policy/page.md): This tutorial explains how to attach a resource-based policy to an S3 bucket using the Policy Generator in AWS.
- [IAM Permission Boundaries](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/IAM-Permission-Boundaries/page.md): This guide explains how to use permission boundaries in IAM to enforce least privilege for new users like interns.
- [Demo Permission Boundaries](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-Permission-Boundaries/page.md): This tutorial demonstrates enforcing least privilege in AWS IAM using permission boundaries to restrict a new users effective permissions.
- [IAM Roles](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/IAM-Roles/page.md): AWS IAM roles provide secure, temporary access to resources, enabling fine-grained permissions and trust relationships while minimizing exposure risk.
- [Demo Creating IAM Role](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-Creating-IAM-Role/page.md): This guide explains how to create an IAM role for EC2 instances to access an S3 bucket securely.
- [IAM Session Policies](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/IAM-Session-Policies/page.md): This article explains how to grant temporary upload access to an S3 bucket using IAM session policies.
- [Demo Session Policies](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-Session-Policies/page.md): This tutorial explains how to grant temporary S3 upload permissions to an IAM user using AWS STS session policies.
- [Auditing with CloudTrail](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Auditing-with-CloudTrail/page.md): Learn to track and audit S3 access using AWS CloudTrail to identify user actions and API calls.
- [Demo CloudTrail](https://notes.kodekloud.com/docs/AWS-IAM/Introduction-to-AWS-Identity-and-Access-Management/Demo-CloudTrail/page.md): Explore the AWS CloudTrail console to audit API calls by inspecting event history and extracting key metadata.

### IAM Policies, Federation, ​STS and MFA​

- [Inline vs Managed Policy](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/Inline-vs-Managed-Policy/page.md): This guide explores differences between AWS managed policies, customer managed policies, and inline policies, including when to use each type and a demo for granting temporary S3 access.
- [Demo Inline Policy](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/Demo-Inline-Policy/page.md): This article explains how to create an inline IAM policy for time-limited S3 uploads by a specific user.
- [IAM Policy Building Blocks](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/IAM-Policy-Building-Blocks/page.md): This article explains the core components of AWS IAM policies for managing permissions and access controls.
- [Demo Policy with Conditions](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/Demo-Policy-with-Conditions/page.md): This tutorial explains how to create an AWS IAM policy with IP and time-based restrictions for administrative actions.
- [MFA and Password Policies](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/MFA-and-Password-Policies/page.md): This guide explains enabling MFA and strong password policies in AWS IAM to enhance account security.
- [Demo MFA and Password Policies](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/Demo-MFA-and-Password-Policies/page.md): This tutorial explains how to secure AWS environments by enabling Multi-Factor Authentication and enforcing custom password policies for IAM users.
- [Security Token ServiceSTS](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/Security-Token-ServiceSTS/page.md): AWS Security Token Service (STS) provides temporary credentials for secure access to AWS resources, enabling least privilege and avoiding long-term credentials.
- [AWS Resource Access Manager](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/AWS-Resource-Access-Manager/page.md): This guide explains how AWS Resource Access Manager enables secure sharing of AWS resources across accounts and within AWS Organizations.
- [Identity Federation](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/Identity-Federation/page.md): Identity federation allows external IdP-authenticated users to access AWS resources without separate credentials, enhancing security and simplifying user management.
- [AWS Private Link](https://notes.kodekloud.com/docs/AWS-IAM/IAM-Policies-Federation-STS-and-MFA/AWS-Private-Link/page.md): AWS PrivateLink enables private, low-latency connectivity between Amazon VPC and AWS services without using the public internet.

### Configure AWS​ IAM at Scale​

- [Overview](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/Overview/page.md): Scaling AWS IAM strategy across multiple accounts involves planning for resource isolation, centralized management, access sharing, monitoring, and security compliance.
- [AWS Organizations](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/AWS-Organizations/page.md): AWS Organizations is a service for centralized governance, billing, and access control across multiple AWS accounts.
- [IAM Cross Account Access](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/IAM-Cross-Account-Access/page.md): This guide configures cross-account access between AWS accounts for secure log retrieval from an S3 bucket without sharing long-term credentials.
- [Demo Cross Account Access](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/Demo-Cross-Account-Access/page.md): Enable cross-account S3 access by configuring bucket policies, creating IAM roles, and testing access via AWS CloudShell.
- [Centralized Logging and Monitoring](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/Centralized-Logging-and-Monitoring/page.md): This article explains how to implement centralized logging and monitoring in AWS using CloudTrail, CloudWatch, and Config services.
- [CloudTrail](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/CloudTrail/page.md): This guide explains how to use AWS CloudTrail to audit and trace EC2 instance shutdowns by identifying the IAM user responsible for the action.
- [Monitoring Demo CloudTrail](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/Monitoring-Demo-CloudTrail/page.md): Learn to identify the IAM user who terminated an EC2 instance using AWS CloudTrail’s Event History for enhanced security visibility.
- [CloudWatch](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/CloudWatch/page.md): This article explains how to use AWS CloudWatch for monitoring, setting alarms, and creating dashboards for AWS resources and applications.
- [Demo CloudWatch](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/Demo-CloudWatch/page.md): This guide explains how to configure an Amazon CloudWatch alarm for EC2 CPU utilization exceeding 70% and set up email notifications.
- [AWS Config](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/AWS-Config/page.md): This guide explores leveraging AWS Config and a PCI Conformance Pack to ensure AWS environments adhere to PCI DSS standards.
- [Demo AWS Config](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/Demo-AWS-Config/page.md): This guide covers configuring AWS Config, adding rules, and deploying a PCI DSS conformance pack in the US East (Ohio) region.
- [IAM Anywhere](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/IAM-Anywhere/page.md): IAM Roles Anywhere allows external applications to securely access AWS services using X.509 certificates managed by a centralized Public Key Infrastructure.
- [IAM Identity Center](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/IAM-Identity-Center/page.md): AWS IAM Identity Center offers centralized identity management and single sign-on for AWS Organizations, enhancing access control across multiple accounts.
- [Demo IAM Identity Center](https://notes.kodekloud.com/docs/AWS-IAM/Configure-AWS-IAM-at-Scale/Demo-IAM-Identity-Center/page.md): This guide explains how to enable and use AWS IAM Identity Center for managing user and group access across AWS accounts and applications.