IAM Roles
Last updated
Last updated
IAM Roles allow granting permissions to AWS services and resources. You define the permissions in the role, and resources inside the role can assume it to gain access.
Allow AWS services to access resources
Provide temporary credentials to resources you run
Control CLI access for users
Permissions: IAM policy granting resource access. Multiple policies can be assigned to a role.
Trust policy: Defines which resources inside can assume the role. Default all resources inside the wrapper.
Session duration: How long credentials last. Default indefinite.
Resources: The resources inside the wrapper that will assume the role
Temporary credentials: Access keys available to resources that assume the role