is IAM replaced by IAM Identity Center

0

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?

Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

Or should IAM be used in parallel with Identity Center?

2개 답변
3
수락된 답변

Hello,

No, IAM is not being replaced by the IAM Identity Center.

For more clarity - https://aws.amazon.com/iam/identity-center/faqs/

Thanks

답변함 4달 전
profile picture
전문가
검토됨 4달 전
1

Hello.

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?
Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

IAM Identity Center can be used to centrally manage users and their sign-ins.
Integration with AWS Organizations is required to manage multiple accounts.
IAM Identity Center differs from IAM in that it uses temporary credentials.
In other words, IAM Identity Center is suitable for humans to operate management consoles, etc., but IAM user credentials (access keys and secret access keys) are suitable for access from programs that require long-term credentials.
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_identity-management.html

You can give access to your AWS account to specific users and provide them specific permissions to access resources in your AWS account. You can use both IAM and AWS IAM Identity Center to create new users or federate existing users into AWS. The main difference between the two is that IAM users are granted long-term credentials to your AWS resources while users in IAM Identity Center have temporary credentials that are established each time the user signs-in to AWS. As a best practice, require human users to use federation with an identity provider to access AWS using temporary credentials instead of as an IAM user. A primary use for IAM users is to give workloads that cannot use IAM roles the ability to make programmatic requests to AWS services using the API or CLI.

profile picture
전문가
답변함 4달 전
profile picture
전문가
검토됨 4달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠