AWS IAM

1. Core concepts

   Principals, identities, resources, policies, authentication and authorization.

2. Identities

   IAM users, groups and roles and how each is used.

3. IAM roles

   Assuming roles, trust policies, temporary credentials, service roles and cross-account access.

4. Policies and permissions

   Identity-based and resource-based policies, JSON policy structure and permissions boundaries.

5. Policy evaluation logic

   How explicit deny, allow, SCPs, boundaries and session policies combine.

6. Policy elements reference

   Effect, Action, Resource, Principal and Condition elements of IAM policies.

7. Credentials and MFA

   Access keys, passwords and multi-factor authentication for IAM identities.

8. Federation and external identity

   SAML and OIDC identity providers and web identity federation into roles.

9. Security best practices

   Least privilege, temporary credentials, MFA and root user protection.

10. IAM Access Analyzer

    Finding external and unused access and validating policies.

11. Troubleshooting

    Diagnosing access denied errors and policy problems.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.