IAM Roles
Overview
IAM Roles allow granting permissions to AWS services and resources. You define the permissions in the role, and resources inside the role can assume it to gain access.
Use Cases
Allow AWS services to access resources
Provide temporary credentials to resources you run
Control CLI access for users
Properties
Permissions: IAM policy granting resource access. Multiple policies can be assigned to a role.
Properties that were left out on purpose.
Trust policy: Defines which resources inside can assume the role. Default all resources inside the wrapper.
Session duration: How long credentials last. Default indefinite.
Inputs
Resources: The resources inside the wrapper that will assume the role
Outputs
Temporary credentials: Access keys available to resources that assume the role
Last updated