IAM：Users & Groups
IAM = Identity and Access Management, Global service
Root account created by default, shouldn`t` be used or shared
Users are people within your organization, and can be grouped
IAM：Permissions
Users or Groups can be assigned JSON documents called policies
These policies define the permissions of the users
In AWS you apply the least privilege principle: don`t give more permissions than a user needs
IAM Policies inheritance
IAM Policies Structure
Consists of "Version, Id, Statement"
Statement consists of "Sid, Effect, Principal, Action, Resource, Condition(optional)"
标签：IAM,Users,Policies,Statement,AWS,学习,Groups From： https://www.cnblogs.com/wangzhilong/p/17177888.html