AWS IAM Overview - It’s Surprisingly Simple - Users vs Roles

❗️ In this video, we’ll finally clarify IAM. Specifically when to use Users vs Roles. This is a confusing topic for many people but with the visuals and examples I’ll share, you’ll realize it’s surprisingly simple.
🧠 IAM is broken into four parts. Users, Groups, Roles, and Policies. It’s confusing at first, but it will all make sense after you watch the video!
---
TIMESTAMPS:
0:00​ Intro
0:17​ Why Do We Need IAM?
1:00​ How Does IAM Work?
2:58 Users Vs. Roles
4:10 One Caveat
5:25 Decision Chart
5:36 Groups
6:22 Now You Try
6:51 Conclusion
---
WHO AM I: I'm Dylan, a Cloud Engineer living in Oregon. I use my background in tech to make videos about technology that enables and grows businesses.
---
🌍 My website / blog -
dylanalbertazzi.com/

[@lazyturtlehostel9397]

informative video but background music is annoying and disctracting

[@touavang34]

I actually enjoyed the music and I definitely enjoy the visuals. Answer to your question is: Set up an temp IAM role and give permissions in what is needing done only, with some sort of trust policy.

[@shreyjoshi8253]

Perfect explanation, thank you!!

[@user-jf1mz2ds6b]

short and simple. very informative. Thanks

[@kyleebowers6881]

Great explanation! Thank you!!!

[@dylanalbertazzi]

Glad it was helpful!

[@AWriterWandering]

Thank you so much my fellow Dylan!

[@dylanalbertazzi]

You are so welcome!

[@nunuminu313]

Great explanation.. Ty!

[@amanuelyohannes7151]

Good job! one thing though I couldn't get 1 Role to be assumed by multiple users. I tried to add principal (user ARN) in the Trust Policy but I keep getting error. Can I add another user ARN to this { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::111111111111:user/John" }, "Action": "sts:AssumeRole" } ] } Thank you.

[@YS-zk4wz]

omg that music what was he thinking

[@rakeshmehra6321]

Thanks for the video. Great explanation. So, If I want to give temporary access to someone, I create user account for him(if not existed already) and assign him a role. Once he's done, I'd unassign the role and even delete the user. Am I right? But why not create the user and add policies to give him access and once he is done, remove policies?

[@dylanalbertazzi]

Really depends on what you mean by temporary... a couple hours vs a few months is diifferent. For a few months... Make a user and attach a policy :) Then delete the user.

[@rakeshmehra6321]

@@dylanalbertazzi Thanks!

[@nope8605]

same my question , that's great.

[@vikasdfghjlYT]

great question.

[@matthewdraevich4214]

great explanation, but background music seems to be too loud

[@jinghuiniu7335]

Roles are only for AWS internal resources, right? For external applications making AWS api calls, they still need a user, and an access key, correct?

[@dylanalbertazzi]

Yes, exactly, Roles are only for AWS internal resources🚀 Depending on how you set up your api you will only need an access key. If you are talking about external users (not developers but users of the app)... Normally you would use something like cognito to handle auth for external users. You make a cognito user pool and connect it to the sign up form on your app. Then you give users within the pool access to the api. This article explains it in depth. medium.com/swlh/how-to-protect-apis-using-amazon-cognito-user-pool-723c471a3468. I wouldn't actually follow this article, it's just for getting an idea of what's going on behind the hood. Amplify makes auth much simpler aws.amazon.com/amplify/authentication/ Hope this helps😛

[@neonlightning8062]

Bruh such a good explanation thanks. Music is too loud though but great explanation.

[@narasimhamgudimella8046]

I think you remove background music as it’s very distracting

[@dylanalbertazzi]

You're not the only person to say this... and all my new videos now have lower bg music. I hope you enjoy the new ones :)

[@user-sf8iu8lx2x]

the background music is louder than your voice.

[@Donnijohnson]

Your explanations are great! But the way you move your hands around while talking is quite confusing and exaggerated, and the music is too loud.

[@veekay2254]

Nice except for the background music

[@asarangan]

Useful video, but please don't annoy your viewers with music. If I want to listen to music I wouldn't be searching for AWS and IAM.

[@R3echo]

Please remove that music. You are ruining a great video.

[@dylanalbertazzi]

I've received that feedback a handful of times and have stopped using it in future vids.

[@Fatvod]

Lmao simple? Aws iam is an absolute disaster

[@deepshah2137]

Thanks for the wonderfull explanation!!