is IAM replaced by IAM Identity Center

0

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?

Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

Or should IAM be used in parallel with Identity Center?

2 Answers
3
Accepted Answer

Hello,

No, IAM is not being replaced by the IAM Identity Center.

For more clarity - https://aws.amazon.com/iam/identity-center/faqs/

Thanks

answered 4 months ago
profile picture
EXPERT
reviewed 4 months ago
1

Hello.

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?
Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

IAM Identity Center can be used to centrally manage users and their sign-ins.
Integration with AWS Organizations is required to manage multiple accounts.
IAM Identity Center differs from IAM in that it uses temporary credentials.
In other words, IAM Identity Center is suitable for humans to operate management consoles, etc., but IAM user credentials (access keys and secret access keys) are suitable for access from programs that require long-term credentials.
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_identity-management.html

You can give access to your AWS account to specific users and provide them specific permissions to access resources in your AWS account. You can use both IAM and AWS IAM Identity Center to create new users or federate existing users into AWS. The main difference between the two is that IAM users are granted long-term credentials to your AWS resources while users in IAM Identity Center have temporary credentials that are established each time the user signs-in to AWS. As a best practice, require human users to use federation with an identity provider to access AWS using temporary credentials instead of as an IAM user. A primary use for IAM users is to give workloads that cannot use IAM roles the ability to make programmatic requests to AWS services using the API or CLI.

profile picture
EXPERT
answered 4 months ago
profile picture
EXPERT
reviewed 4 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions