> For the complete documentation index, see [llms.txt](https://anon-coders-notes.gitbook.io/techwriterdev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://anon-coders-notes.gitbook.io/techwriterdev/cloud/aws/questions/iam.md).

# IAM

Q1. Why do we need an IAM Users and Groups?

* To allocate permission using policy documents *(JSON documents)*.

Q2. Best IAM practices.

* Dont use AWS Root account for anything other AWS account setup.
* Always have one AWS user per person, dont share access keys or passwords.
* Leverage groups and assign permission to groups. Add users to groups.
* Create a strong password policy and MFA.
* Create Roles for AWS resources.
* Use AWS Access Keys for SDK and CLI.