Deep Dive with Security: AWS Identity and Access Management (IAM) (Includes Labs)

We have updated this course on December 5, 2022 to correct a problem that was impacting course completion. If you are enrolled in the course and have not completed it, your progress may be impacted. We apologize for any inconvenience this may cause.

As you build and deploy on AWS, granting developers and applications the right access to the right resources is critical to security. This self-paced course provides a deep dive into AWS Identity and Access Management (IAM) and best practices for using IAM policies. This course also covers advanced concepts, such as identity federation, temporary credentials, AWS IAM Identity Center, and ways to troubleshoot access issues.   

• Course level: Intermediate 
• Duration: 8 hours 

Activities 

This course includes interactive content, videos, assessments, and exercises. 

Course objectives 

In this course, you will learn to: 

• Use and differentiate between role-based and attribute-based access controls      
• Leverage global and IAM condition keys according to best practices     
• Interact with AWS Security Token Service (AWS STS) for temporary credentials     
• Manage IAM session policies and duration to scope down permissions     
• Create an IAM identity provider    
• Demonstrate how you can use AWS IAM Identity Center in identity federation    
• Troubleshoot IAM access issues 

Intended audience 

This course is intended for: 

• Security professionals with working knowledge of AWS      
• Users with an AWS account looking to build their knowledge on how best to use IAM 

Prerequisites 

We recommend that attendees of this course have: 

• Have 1-2 years of experience using IAM to manage access via policies and roles   
• Have taken the AWS Security Fundamentals (2nd Edition) digital training or attended the AWS Security Essentials classroom training 

Course outline 

Module 1: AWS Identity and Access Management Review  

• IAM Fundamentals 
• IAM Policy Basics 
• Policy Evaluation Overview 

Module 2: Access Control Deep Dive     

• The Matching Game      
• Attributes and Tagging    
• IAM Condition Keys    
• Global Condition Keys     
• Advanced Policy Elements    

Module 3: Access Delegation Deep Dive      

• Interacting with AWS STS     
• Managing Role Sessions      
• Session Tagging     

Module 4: Identity Federation Deep Dive     

• Federating Users in AWS      
• SAML-Based Federation    
• Web-Based Federation     
• AWS IAM Identity Center for User Federation 

Module 5: Access Analysis and Troubleshooting     

• IAM Policy Simulator      
• IAM Access Analyzer    
• Viewing Access History      
• Troubleshooting with AWS CloudTrail