IAM
IAM (Identity and Access Management) is used to manage access to Compute, Storage, Database and Application Services in the AWS cloud.
- Applications can sign their API requests with AWS Credentials.
- Securely distribute your AWS credentials to the instances
- Applications on those instances to sign requests - while protecting them from otehr users
Challenge - to securely distribute credentials across all instances - especially those created by AWS on your behalf - Spot Instances and Auto Scalling group.
IAM Roles
- With IAM Roles applications can securely access AWS service API from EC2 instances.
- Now you can create IAM role, which has a set of permissions, and launch EC2 instances with the IAM role.
References:
No comments:
Post a Comment