https://fstehle.com/tags/iam/ Recent content in Iam on fstehle.com Hugo en Sun, 22 Jul 2018 14:41:51 +0200 https://fstehle.com/posts/aws-multiaccount-aws-vault/ Tue, 10 Jul 2018 22:47:00 +0200 https://fstehle.com/posts/aws-multiaccount-aws-vault/ <p>When using AWS in larger organizations, it&rsquo;s a best practice to use <strong>multiple AWS accounts</strong> for different teams, applications or environments. AWS provides <a href="https://aws.amazon.com/documentation/organizations">AWS organizations</a> to support creating multiple AWS accounts for one organization.</p> <p>When using AWS organizations you usually create <strong>IAM users</strong> in the <strong>master account</strong> and provide different <strong>IAM roles</strong> in the <strong>member accounts</strong>, which the users in the master accont can assume. As a security best practice it is also recommended to require <strong>MFA</strong> to assume roles in the member accounts.</p>