is IAM replaced by IAM Identity Center

0

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?

Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

Or should IAM be used in parallel with Identity Center?

2 Respostas
3
Resposta aceita

Hello,

No, IAM is not being replaced by the IAM Identity Center.

For more clarity - https://aws.amazon.com/iam/identity-center/faqs/

Thanks

respondido há 4 meses
profile picture
ESPECIALISTA
avaliado há 4 meses
1

Hello.

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?
Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

IAM Identity Center can be used to centrally manage users and their sign-ins.
Integration with AWS Organizations is required to manage multiple accounts.
IAM Identity Center differs from IAM in that it uses temporary credentials.
In other words, IAM Identity Center is suitable for humans to operate management consoles, etc., but IAM user credentials (access keys and secret access keys) are suitable for access from programs that require long-term credentials.
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_identity-management.html

You can give access to your AWS account to specific users and provide them specific permissions to access resources in your AWS account. You can use both IAM and AWS IAM Identity Center to create new users or federate existing users into AWS. The main difference between the two is that IAM users are granted long-term credentials to your AWS resources while users in IAM Identity Center have temporary credentials that are established each time the user signs-in to AWS. As a best practice, require human users to use federation with an identity provider to access AWS using temporary credentials instead of as an IAM user. A primary use for IAM users is to give workloads that cannot use IAM roles the ability to make programmatic requests to AWS services using the API or CLI.

profile picture
ESPECIALISTA
respondido há 4 meses
profile picture
ESPECIALISTA
avaliado há 4 meses

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas