AWS identity services

AWS identity services provide a centralized framework to manage users, groups, and roles with fine-grained access control across all cloud resources.

Security starts with a solid perimeter, and AWS identity services deliver exactly that through tools like IAM, IAM Identity Center, and Amazon Cognito. You get precise control over who can touch what: use IAM to define specific permissions for your 100-person engineering team, or deploy Cognito to handle sign-ins for millions of mobile app users. By implementing the principle of least privilege (granting only the exact access needed), you minimize your blast radius and keep your data locked down. Whether you are federating an existing Active Directory or building a cloud-native workforce, these services ensure that every API call is authenticated and every resource is protected.

https://aws.amazon.com/iam/