is IAM replaced by IAM Identity Center

0

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?

Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

Or should IAM be used in parallel with Identity Center?

profile picture
Lottie
已提问 4 个月前353 查看次数
2 回答
3
已接受的回答

Hello,

No, IAM is not being replaced by the IAM Identity Center.

For more clarity - https://aws.amazon.com/iam/identity-center/faqs/

Thanks

已回答 4 个月前
profile picture
专家
已审核 4 个月前
1

Hello.

Can I just confirm that IAM Identity Center should only be used to manage account, users and groups?
Is there any situations creating users/groups with IAM is more suitable than IAM Identity Center?

IAM Identity Center can be used to centrally manage users and their sign-ins.
Integration with AWS Organizations is required to manage multiple accounts.
IAM Identity Center differs from IAM in that it uses temporary credentials.
In other words, IAM Identity Center is suitable for humans to operate management consoles, etc., but IAM user credentials (access keys and secret access keys) are suitable for access from programs that require long-term credentials.
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_identity-management.html

You can give access to your AWS account to specific users and provide them specific permissions to access resources in your AWS account. You can use both IAM and AWS IAM Identity Center to create new users or federate existing users into AWS. The main difference between the two is that IAM users are granted long-term credentials to your AWS resources while users in IAM Identity Center have temporary credentials that are established each time the user signs-in to AWS. As a best practice, require human users to use federation with an identity provider to access AWS using temporary credentials instead of as an IAM user. A primary use for IAM users is to give workloads that cannot use IAM roles the ability to make programmatic requests to AWS services using the API or CLI.

profile picture
专家
已回答 4 个月前
profile picture
专家
已审核 4 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则