Getting started with AWS Identity Services
summary
Explains the concrete AWS identity model: “who can access what” implemented with IAM policies (identity and resource-based), deny-by-default evaluation, and session/SCP controls; recommends starting access with AWS SSO (works with SCIM, Okta, Azure AD, or native directory) and using AWS Organizations plus Control Tower and StackSets for multi-account OU structures, guardrails, and automated account vending. Describes resource tagging, Resource Access Manager, last-accessed timestamps, and IAM Access Analyzer (automated reasoning, policy generation, previews) to shrink permissions and find cross-account or public exposures.
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:57Identity, access, and resource management
- 1:41AWS identity management - Who
- 3:07AWS access management - Can access
- 6:08AWS resource management - What
- 8:20Next, how to access AWS Start with AWS SSO
- 10:23AWS SSO access management model
- 10:57Use AWS SSO with an external IdP and SCIM
- 12:33Why scale to a multi-account model?
- 14:25Organize your resources
- 15:56AWS Organizations Benefits
- 16:28Getting started with AWS Organizations
- 18:10Managing your multi-account environment
- 18:25AWS Control Tower
- 21:38IAM Access Analyzer - Additional features
- 23:43Learn security with AWS Training and Certification
related talks
23mGetting started with identity on AWS
28mIdentity Services on AWS
57mA first-principles approach: AWS Identity and Access Management (IAM)
01h 02mWhy IAM is the new perimeter, and how to govern it
31mIAM and why it is important in Cloud environments
43mDemystifying the Identity Capabilities of AWS for Enterprise Practitioners
01h 00mAWS Identity Workshop
27mIntroduction to AWS Security