AWS IAM - User, Root User & Groups


👤 IAM Users
IAM means Identity and Access Management.
Individual identities for people/services to access AWS.
IAM is a global service.
Can have:
Programmatic access (CLI, SDK)
Console access (via username/password)
Should NOT use root user—create IAM users instead
Permissions assigned directly or via groups
👥 IAM Groups
Collection of IAM users.
Used to assign permissions to multiple users at once.
Easier management than assigning policies to users individually.
- Example:
Admin
group → hasAdministratorAccess
→ all users in the group inherit it.
- Example:
Follow me for more such content
Subscribe to my newsletter
Read articles from Jay Tillu directly inside your inbox. Subscribe to the newsletter, and don't miss out.
Written by

Jay Tillu
Jay Tillu
Hello! I'm Jay Tillu, an Information Security Engineer at Simple2Call. I have expertise in security frameworks and compliance, including NIST, ISO 27001, and ISO 27701. My specialities include Vulnerability Management, Threat Analysis, and Incident Response. I have also earned certifications in Google Cybersecurity and Microsoft Azure. I’m always eager to connect and discuss cybersecurity—let's get in touch!