| Did this page help you? Yes No Tell us about it... |
This section links to topics that describe how IAM integrates with the different AWS products, and how to write policies to control access to a particular AWS product and its resources.
The following table summarizes whether you can grant IAM permissions that control access to a service's actions, resources, or both. For example, you can use IAM to control which Amazon EC2 actions users have access to, but you can't use IAM to control users' access to AMIs, volumes, instances, etc.
| AWS Product | Actions | Resources | For more information, see... |
|---|---|---|---|
|
AWS Identity and Access Management (IAM) |
![]() |
![]() | |
|
Amazon Web Services Account Billing Information |
![]() |
| Controlling User Access to Your AWS Account Billing Information *You can use IAM policies to control user access to your account's Account Activity page and Usage Reports page. |
|
Amazon CloudFront |
![]() |
| Controlling User Access to Your AWS Account in the Amazon CloudFront Developer Guide |
|
Amazon CloudWatch |
![]() |
| Controlling User Access to Your AWS Account in the Amazon CloudWatch Developer Guide |
|
Amazon DynamoDB |
![]() |
![]() |
Controlling Access to Amazon DynamoDB Resources in the Amazon DynamoDB Developer Guide |
|
Amazon ElastiCache |
![]() |
| Controlling User Access to Your AWS Account in the Amazon ElastiCache User Guide |
|
Amazon Elastic Compute Cloud (EC2) |
![]() |
| Using AWS Identity and Access Management in the Amazon Elastic Compute Cloud User Guide |
|
Amazon Elastic MapReduce |
![]() |
| Configuring User Permissions in the Amazon Elastic MapReduce Developer Guide |
|
Amazon Relational Database Service (RDS) |
![]() |
| Controlling User Access to Your AWS Account in the Amazon Relational Database Service (RDS) User Guide |
|
Amazon Route 53 |
![]() |
![]() | Controlling User Access with IAM in the Amazon Route 53 Developer Guide |
|
Amazon SimpleDB |
![]() |
![]() | Managing Users of Amazon SimpleDB in the Amazon SimpleDB Developer Guide |
|
Amazon Simple Email Service (SES) |
![]() |
| Controlling User Access with IAM in the Amazon Simple Email Service Developer Guide |
|
Amazon Simple Notification Service (SNS) |
![]() |
![]() | Controlling User Access to Your AWS Account in the Amazon Simple Notification Service Getting Started Guide |
|
Amazon Simple Queue Service (SQS) |
![]() |
![]() | Controlling User Access to Your AWS Account in the Amazon Simple Queue Service Developer Guide |
|
Amazon Simple Storage Service (S3) |
![]() |
![]() | Using IAM Policies in the Amazon Simple Storage Service Developer Guide |
|
Amazon Simple Workflow Service (SWF) |
![]() |
| Managing Access to Your Amazon SWF Workflows in the Amazon Simple Workflow Service Developer Guide **For Amazon SWF, IAM can only grant access to all Amazon SWF functionality within an account. |
|
Amazon Virtual Private Cloud (VPC) |
![]() |
| Controlling VPC Management in the Amazon Virtual Private Cloud User Guide |
|
Auto Scaling |
![]() |
| Auto Scaling and AWS Identity and Access Management in the Auto Scaling Developer Guide |
|
AWS CloudFormation |
![]() |
| Controlling User Access With AWS Identity and Access Management in the AWS CloudFormation User Guide |
|
AWS Elastic Beanstalk |
![]() |
![]() | Using AWS Elastic Beanstalk with AWS Identity and Access Management (IAM) in the AWS Elastic Beanstalk Developer Guide |
|
AWS Storage Gateway |
![]() |
![]() | Access Control Using AWS Identity and Access Management (IAM) in the AWS Storage Gateway User Guide |
|
Elastic Load Balancing |
![]() |
| Controlling User Access to Your AWS Account in the Elastic Load Balancing Developer Guide |