08-09-2025Q.no 5:how the roles and groups are different?

Question

Barath A · Accepted Answer

1. What is an IAM Role? An IAM Role is: A set of permissions that can be assumed temporarily by: IAM users AWS services (e.g., EC2, Lambda) External users (e.g., from another AWS account or SAML) Not associated with a specific user or group. Commonly used for: Cross-account access Granting temporary credentials Service-to-service access 📌 Example: An EC2 instance can assume a role to get temporary permissions to read from an S3 bucket. 👥 2. What is an IAM Group? An IAM Group is: A way to organize multiple IAM users. You attach policies to the group, and all users in the group inherit those permissions. Groups are only for IAM users, not roles or services. 📌 Example: A "Developers" group might have permissions to manage EC2 and S3. Any user added to that group automatically gets those permissions.

08-09-2025Q.no 5:how the roles and groups are different?

Ekasquest - Cloud Computing, DevOps & Tech Q&A Community disponible en

Ekasquest - Cloud Computing, DevOps & Tech Q&A Community disponible en