AWS IAM Overview - It’s Surprisingly Simple - Users vs Roles

❗️ In this video, we’ll finally clarify IAM. Specifically when to use Users vs Roles. This is a confusing topic for many people but with the visuals and examples I’ll share, you’ll realize it’s surprisingly simple.

🧠 IAM is broken into four parts. Users, Groups, Roles, and Policies. It’s confusing at first, but it will all make sense after you watch the video!

---

TIMESTAMPS:
0:00​ Intro
0:17​ Why Do We Need IAM?
1:00​ How Does IAM Work?
2:58 Users Vs. Roles
4:10 One Caveat
5:25 Decision Chart
5:36 Groups
6:22 Now You Try
6:51 Conclusion

---

WHO AM I: I'm Dylan, a Cloud Engineer living in Oregon. I use my background in tech to make videos about technology that enables and grows businesses.

---

🌍 My website / blog -

[lazyturtlehostel]

informative video but background music is annoying and disctracting

[kjbiliks]

short and simple. very informative. Thanks

[narasimhamgudimella]

I think you remove background music as it’s very distracting

[Donnijohnson]

Your explanations are great! But the way you move your hands around while talking is quite confusing and exaggerated, and the music is too loud.

[Fatvod]

Lmao simple? Aws iam is an absolute disaster

[raihanahmed]

Can't hear what you have been saying. Loud music. Quitting...

[rakeshmehra]

Thanks for the video. Great explanation.

So, If I want to give temporary access to someone, I create user account for him(if not existed already) and assign him a role. Once he's done, I'd unassign the role and even delete the user. Am I right?

But why not create the user and add policies to give him access and once he is done, remove policies?

[matthewdraevich]

great explanation, but background music seems to be too loud

[ganjuror]

ugh the music is so obnoxious i couldn't watch this

[touavang]

I actually enjoyed the music and I definitely enjoy the visuals.

Answer to your question is:

Set up an temp IAM role and give permissions in what is needing done only, with some sort of trust policy.

[Recho]

Please remove that music. You are ruining a great video.

[asarangan]

Useful video, but please don't annoy your viewers with music. If I want to listen to music I wouldn't be searching for AWS and IAM.

[amanuelyohannes]

Good job! one thing though I couldn't get 1 Role to be assumed by multiple users. I tried to add principal (user ARN) in the Trust Policy but I keep getting error. Can I add another user ARN to this {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"AWS":
},
"Action": "sts:AssumeRole"
}
]
}

Thank you.

[neonlightning]

Bruh such a good explanation thanks. Music is too loud though but great explanation.

[ManjunathJayam-ek]

the background music is louder than your voice.

[deepshah]

Thanks for the wonderfull explanation!!

[jinghuiniu]

Roles are only for AWS internal resources, right? For external applications making AWS api calls, they still need a user, and an access key, correct?