IAM Role with Embedded Policy and Instance Profiles. This example shows an embedded policy in the AWS::IAM::Role. The policy is specified inline in the Policies property of the AWS::IAM::Role.

For these scenarios, you can delegate access to AWS resources using an IAM role. This section introduces roles and the different ways you can use them, when and how to choose among approaches, and how to create, manage, switch to (or assume), and delete roles.

The Registry now supports multi-language docs powered by CDK for Terraform. Learn more.

Create an IAM role from the AWS Management Console, the AWS CLI, or the IAM API.

By using IAM roles, your application running in any AWS compute environment, such as Amazon EC2 instances, can access AWS resources with temporary credentials, removing the need to manage long-term credentials.

2024年1月8日 · Discover the essentials of AWS IAM roles for beginners. Learn to create, manage, and apply roles for enhanced cloud security and operational efficiency.

2022年3月3日 · IAM Roles manage who has access to your AWS resources, whereas IAM policies control their permissions. A Role with no Policy attached to it won’t have to access any AWS resources. A Policy that is not attached to an IAM role is effectively unused.

Run the following command to verify that you assumed the IAM role: aws sts get-caller-identity. If you assume the example-role, then this AWS CLI command will output the ARN as arn:aws:sts::123456789012:assumed-role/example-role/AWSCLI-Session instead of arn:aws:iam::123456789012:user/Bob.

Use IAM Roles Anywhere to allow workloads that run outside of AWS, such as on-premises, hybrid, and multicloud environments, to access AWS resources by using X.509 digital certificates issued by your registered certificate authorities.

2022年11月3日 · In this post, we will dive into the details of how role trust policies work and how you can use them to restrict how your roles are assumed. There are several different scenarios where you might use IAM roles on AWS: