Security, Identity, and Compliance
AWS IAM Identity Center
A service for centrally managing workforce access to multiple AWS accounts and supported applications, often with an external identity provider.
Key points
- Users can receive permission sets that map to roles in AWS accounts.
- Federation lets people use centrally managed identities instead of separate IAM users in every account.
- It supports a single access portal for assigned accounts and applications.
Best-known use cases
- Provide workforce single sign-on across an AWS organization.
- Federate an existing corporate identity source with AWS.
What candidates often confuse it with
- IAM supplies policies, roles, and account-level access controls; IAM Identity Center coordinates workforce access across accounts.
- Amazon Cognito is primarily for identities in customer-facing applications, not workforce administration.
Key Cloud Practitioner takeaway
For centralized employee access across accounts, think IAM Identity Center; for resource permissions, think IAM.
Related services
- AWS Identity and Access Management (IAM)
- AWS Organizations
Relevant exam tasks
- D2.3