What is IAM?

AWS Identity and Access Management (IAM) lets you manage access to AWS services securely. You create users, groups, and roles, and assign permissions through policies (JSON documents). Best practices: use the root account only for billing, enable MFA, follow the principle of least privilege, and use roles for applications instead of embedding access keys.