What is the difference between authentication and authorization?

Authentication verifies who you are — proving your identity (username and password, MFA). Authorization determines what you're allowed to do — your permissions and access level. In AWS, IAM handles both: authentication through users, passwords, and access keys; authorization through IAM policies that define allowed or denied actions on specific resources.