Q3 - Principal of Least Privilege for IAM Roles #aws #awsiam #cloudcomputing

Does role be also controlled by the principle of least privileges ?

Check my Free Udemy Training to learn more about AWS IAM:

An IAM role is an IAM identity that you can create in your account that has specific permissions. An IAM role is similar to an IAM user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS. However, instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it. Also, a role does not have standard long-term credentials such as a password or access keys associated with it. Instead, when you assume a role, it provides you with temporary security credentials for your role session.

[kumarsatyam]

Thanks Ashish for the detailed explanation.

[ajitnklab]

Hi Ashish, Along with policy, its best practice to set up permission boundary policy to prevent privilege's escalation by the user. - Ajit