This is documentation of my learnings from from the Linkedin course on AWS for Developers.
New accounts come with a root level user that has permissions to do everything including deleting the account.
- It is best practice to another user and give that user permissions for administration access but it will not be able to delete the account
- Users get
permissions
throughpolicies
that are attached to a user- You can create
policies
in bulk by using groups
- You can create
Services
haveroles
and auser
haspermissions
for determining their accessRoles
havepolicies
just likepermissions