is IAM replaced by IAM Identity Center

0

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?

Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

Or should IAM be used in parallel with Identity Center?

profile picture
Lottie
posta 4 mesi fa353 visualizzazioni
2 Risposte
3
Risposta accettata

Hello,

No, IAM is not being replaced by the IAM Identity Center.

For more clarity - https://aws.amazon.com/iam/identity-center/faqs/

Thanks

con risposta 4 mesi fa
profile picture
ESPERTO
verificato 4 mesi fa
1

Hello.

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?
Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

IAM Identity Center can be used to centrally manage users and their sign-ins.
Integration with AWS Organizations is required to manage multiple accounts.
IAM Identity Center differs from IAM in that it uses temporary credentials.
In other words, IAM Identity Center is suitable for humans to operate management consoles, etc., but IAM user credentials (access keys and secret access keys) are suitable for access from programs that require long-term credentials.
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_identity-management.html

You can give access to your AWS account to specific users and provide them specific permissions to access resources in your AWS account. You can use both IAM and AWS IAM Identity Center to create new users or federate existing users into AWS. The main difference between the two is that IAM users are granted long-term credentials to your AWS resources while users in IAM Identity Center have temporary credentials that are established each time the user signs-in to AWS. As a best practice, require human users to use federation with an identity provider to access AWS using temporary credentials instead of as an IAM user. A primary use for IAM users is to give workloads that cannot use IAM roles the ability to make programmatic requests to AWS services using the API or CLI.

profile picture
ESPERTO
con risposta 4 mesi fa
profile picture
ESPERTO
verificato 4 mesi fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande