IAM (Identity and Access Management)
- Identities
- Users, groups and group membership
- Roles with trust policies
- Access keys (create, list, deactivate, delete)
- Permissions
- AWS managed policies and your own custom policies
- Account password policy
- simulate-principal-policy to test what a user may do
- Policy conditions are not evaluated
- The account ID is always 123456789012