AWS Identity and Access Management
Using IAM (API Version 2010-05-08)
« PreviousNext »
View the PDF for this guide.Go to the AWS Discussion Forum for this product.Go to the Kindle Store to download this guide in Kindle format.Did this page help you?  Yes | No |  Tell us about it...

Accessing IAM

You can work with AWS Identity and Access Management using the following:

  • AWS Management Console

  • Command line interface (CLI)

  • AWS SDKs

  • IAM Query API

The AWS Management Console provides a web-based user interface for managing IAM resources, such as the following:

  • Create groups and assign permissions to groups

  • Add users

  • Create security credentials for your users

  • Assign passwords to your users

For more information about accessing IAM through the console, see IAM and the AWS Management Console. For a tutorial on using the console, see Creating an Admins Group Using the Console.

You can also perform IAM tasks using command line interface (CLI) tools. If you are comfortable working at the command line, the CLI can be faster and more convenient than using the console. The CLI is also useful if you want to build scripts that perform IAM tasks. For information about setting up and using the IAM CLI, see AWS Identity and Access Management Command Line Interface Reference.

To access IAM programmatically, you can use one of the AWS SDKs. These provide libraries and sample code for various programming languages (Java, Ruby, .NET, etc.). For information about the AWS SDKs, including how to download and install them, see the Tools for Amazon Web Services page.

Alternatively, you can access IAM programmatically using the IAM Query API, which lets you issue HTTPS requests directly. (When you use the Query API, you must include code to digitally sign requests using your credentials.) For more information, see the AWS Identity and Access Management API Reference.