IAM Roles
Learn how to provide access to your AWS resources to an entity within or outside of an AWS account using IAM Roles
We'll cover the following...
An IAM role is an AWS identity similar to IAM users with an identity-based policy specifying its access. However, unlike the IAM users, IAM roles can be used to provide access to any entity within or outside the AWS account. A role is not attached to a specific entity and can be used by multiple entities at the same time to get the required access.
IAM roles provide this access for a limited amount of time in the form of sessions. The maximum time for this session can be 12 hours. By default, the value for this session is one hour. Temporary security credentials are associated with each of these sessions, which expire when the session ends.
Policies associated with an IAM role
There are mutiple policies associated with an IAM role that dictate the scope of permissions of the role and the entities that are allowed ...