IAM fundamentals: root user, users, groups, roles, policies, and least privilege

By the end you’ll be able to

• Differentiate the AWS account root user from IAM identities and explain the risks of routine root-user use.
• Explain the purpose of IAM users, IAM groups, and IAM roles in granting access to AWS resources.
• Interpret IAM policies as JSON-based permission documents that define allowed or denied actions on resources under specified conditions.