New user sign up using AWS Builder ID

New user sign up using AWS Builder ID is currently unavailable on re:Post. To sign up, please use the AWS Management Console instead.

AWS re:Post Knowledge Center Spotlight: AWS Identity and Access Management (IAM)

Language: English

Find the newest and most recent articles for IAM.

0

This spotlight on IAM equips you with the skills and troubleshooting tips to get the most out of a powerful service.

Topics

Security, Identity, & Compliance

Tags

AWS Identity and Access Management AWS Knowledge Center

EXPERT

Patrick Kennedy

updated 3 months ago535 views

Overview

The AWS re:Post Knowledge Center is your one-stop-shop for authoritative, up-to-date guidance on using AWS services. This month, we're highlighting IAM, a service that helps you manage and scale workload and workforce access securely supporting your agility and innovation in AWS.

Whether you're new to IAM or an experienced user, the following Knowledge Center articles equip you with the skills and troubleshooting tips to increase security and provide access to resources.

Configuration

These articles provide guidance on implementing fine-grained access controls, improving security, and managing AWS resources effectively.

How do I use IAM policies with tag-based access control to restrict access to objects in S3?

Use IAM policies with tag based access-control to restrict access to an S3 bucket

How do I use IAM policy tags to restrict how an EC2 instance or EBS volume can be accessed?

Use IAM tags to restrict EC2 instances or EBS volumes

How do I recreate a deleted IAM user or role with the same policies and permissions?

Recreate a deleted IAM user or role with the same policies and permissions

How can I grant access to Cost Explorer for an IAM user with a member account of an Organization?

Grant Cost Explorer access for IAM users with an Organizations member account

How do I restrict access of IAM Identities to specific Amazon EC2 resources?

Restrict access of users to specific EC2 resources

How do I use the AWS CLI to authenticate access to AWS resources with an MFA token?

Use the AWS CLI with MFA to authenticate

How do I change the email address that's associated with my AWS account?

Change your AWS account email address

Managing

These articles cover various aspects of AWS Identity and Access Management (IAM), security best practices, and managing resources and AWS services.

How do I enforce MFA authentication for IAM users that use the AWS Management Console and the AWS CL

Enforce MFA authentication for IAM users that use the AWS CLI

How do I use the IAM policy simulator to test IAM policies and permissions?

Test IAM policies and permissions with the IAM policy simulator

How do I identify when an IAM access key was last used?

Identify when an IAM access key was last used

How do I manage the SCP character size limit or number of SCPs for an AWS Organization?

Manage the AWS Organization SCP character limit

How can I monitor the account activity of specific IAM users, roles, and AWS access keys?

View activity of IAM users, roles, and AWS access keys

How do I manage IAM permissions for Secrets Manager secrets access?

Manage IAM permissions for Secrets Manager secrets

How do I grant cross-account access to objects that are in Amazon S3 buckets?

Provide cross-account access to objects in Amazon S3 buckets

What can I do if I notice unauthorized activity in my AWS account?

Resolve issues with unauthorized activity in AWS accounts

How do I recover a lost or forgotten AWS password?

Recover your AWS account password

How do I reset a lost or broken MFA device for my IAM user or AWS account root user?

Reset an MFA device for the AWS account root user

How do I troubleshoot IAM "AccessDenied" or "Not authorized" federation errors from my IdP?

Troubleshoot IAM "Not authorized to perform AssumeRoleWithWebIdentity" federation errors from a IdP

How do I resolve the IAM user error "not authorized to perform iam:PassRole"?

Resolve the IAM error "not authorized to perform iam:PassRole"

How do I request an increase to my IAM quota?

Increase the IAM default quota

How do I decode and analyze authorization errors for EC2 instance launch failures?

Decode "UnauthorizedOperation" errors for EC2 instance launch failures

How do I delete, deactivate, or rotate root access keys in AWS GovCloud (US) accounts?

Manage root user account access keys in AWS GovCloud (US) accounts

How do I use IAM Access Advisor to view information and IAM Access Analyzer to validate policies?

Use IAM Access Advisor to view last accessed information and IAM Access Analyzer to review policies

Troubleshooting

These articles cover a range of topics related to AWS Identity and Access Management (IAM), security, and troubleshooting common issues.

How do I resolve permission issues with policies generated from IAM Access Analyzer?

Resolve IAM Access Analyzer policy permission issues

How do I resolve AWS KMS key access errors after I tried to retrieve an Secrets Manager secret?

Resolve Secrets Manager secret access errors

How do I troubleshoot Amazon EC2 Auto Scaling launch template "not authorized" errors?

Troubleshoot EC2 Auto Scaling launch template “not authorized” errors

How do I increase the default size limit for managed policies or character for an IAM user or role?

Increase the IAM managed policies or character size limit

How do I resolve the IAM error "Cannot perform the operation on the protected role AWSReservedSSO"?

Resolve the IAM error “"Cannot perform the operation on the protected role AWSReservedSSO"

How do I troubleshoot an "invalid SAML response" error for Okta and AWS IAM Federation?

Troubleshoot "invalid SAML response" error for Okta and AWS IAM Federation

How do I resolve the "PackedPolicyTooLarge" error when I assume an IAM role through AWS STS?

Resolve the AWS STS "PackedPolicyTooLarge" IAM assume role error

How do I resolve "AccessDenied" or "Invalid" errors when I tried to assume a cross-account IAM role?

Troubleshoot IAM assume role errors "AccessDenied" or "Invalid information"

How do I resolve the IAM trust policy error "Invalid principal in policy"?

Resolve the IAM error "Failed to update trust policy. Invalid principal in policy"

How do I resolve the error "Key Id does not exist" when I tried to access my Amazon S3 bucket?

Resolve the S3 bucket "AWS Access Key Id" error

How do I troubleshoot IAM permission issues for the Billing and Cost Management console?

Troubleshoot IAM permission issues for the Billing and Cost Management console

How do I resolve the IAM user password error "user is not authorized or password does not comply"?

Resolve the IAM user password error "user is not authorized or password does not comply"

How do I troubleshoot EC2 instance profile errors for IAM roles?

Troubleshoot EC2 instance profile errors for IAM roles

How do I troubleshoot SCP explicit deny errors in AWS Organizations?

Troubleshoot SCPs explicit deny errors in AWS Organizations

Related information

Have more questions about IAM? Check out the re:Post IAM knowledge base or ask your own question to get guidance from the AWS community.

No comments

Relevant content

AWS re:Post Knowledge Center Spotlight: Amazon RDS for PostgreSQL
EXPERT
Henry Fuentes Jr
published 6 months ago
AWS re:Post Knowledge Center Spotlight: QuickSight
EXPERT
Shannon Lewis
published 8 months ago
AWS re:Post Knowledge Center Spotlight: Amazon Cognito
EXPERT
Henry Fuentes Jr
published 8 months ago
EKS cluster, AWS Organizations and IAM Identity Center Access
Accepted Answer
ignacio
asked a year ago
IAM Identity Center: AWS Management Console and AWS Account Context
Accepted Answer
Mark Brodziak
asked 2 years ago
AWS IAM Identity Center users and AWS IAM users
Monica
asked 2 years ago
How do I use the IAM Identity Center and the AWS access portal?
AWS OFFICIALUpdated a year ago
Does using the IAM Identity Center affect my IAM identities or federation configuration?
AWS OFFICIALUpdated 2 years ago
How does Amazon Q Developer Pro work with AWS Organizations and IAM Identity Center?
AWS OFFICIALUpdated a month ago