--- title: "IAM Archives - Cybr" url: https://cybr.com/tag/iam/ --- From the blog # IAM Read Cybr articles tagged IAM. Browse the archive ## Latest articles 8 on this page - December 19, 2024 ### AWS IAM Credentials Report \[Cheat Sheet\] I recently came across this neat cheat sheet by Steampipe for AWS IAM Credential Reports, which is a simple but mighty feature you may not… Read article [AWS IAM Credentials Report \[Cheat Sheet\]](https://cybr.com/cloud-security/aws-iam-credentials-report-cheat-sheet/) - February 7, 2024 ### What Is AWS IAM? Users, Groups, Roles, and Policies Explained AWS IAM controls who can do what in your AWS accounts. Here is how users, groups, roles, and policies fit together, with CLI examples for each. Read article [What Is AWS IAM? Users, Groups, Roles, and Policies Explained](https://cybr.com/cloud-security/what-is-aws-iam/) - February 7, 2024 ### AWS IAM Roles Explained: Trust Policies, Service Roles, and Best Practices IAM roles give people and workloads short-term credentials instead of long-term access keys. Learn how roles, trust policies, and service-linked roles work. Read article [AWS IAM Roles Explained: Trust Policies, Service Roles, and Best Practices](https://cybr.com/cloud-security/aws-iam-roles-explained/) - February 7, 2024 ### AWS IAM Privilege Escalation Techniques How attackers abuse IAM permissions like iam:CreateAccessKey and iam:AttachUserPolicy to escalate privileges in AWS, with example policies, exploits, and fixes. Read article [AWS IAM Privilege Escalation Techniques](https://cybr.com/cloud-security/aws-iam-privilege-escalation-techniques/) - February 7, 2024 ### How to Achieve Least Privilege in AWS IAM Least privilege is easy to say and hard to do. Here are practical steps to get there in AWS, and how IAM Access Analyzer helps you check your policies. Read article [How to Achieve Least Privilege in AWS IAM](https://cybr.com/cloud-security/aws-iam-least-privilege/) - February 7, 2024 ### AWS IAM Identity Center: Permission Sets, Identity Sources, and Why to Use It IAM Identity Center (formerly AWS SSO) gives your workforce single sign-on access to many AWS accounts without IAM users or long-term credentials. Read article [AWS IAM Identity Center: Permission Sets, Identity Sources, and Why to Use It](https://cybr.com/cloud-security/aws-iam-identity-center/) - February 7, 2024 ### AWS IAM Enumeration CLI Commands A reference of AWS CLI commands for enumerating IAM users, groups, roles, and policies, with the permission each command needs. Read article [AWS IAM Enumeration CLI Commands](https://cybr.com/cloud-security/aws-iam-enumeration/) - January 16, 2024 ### My AWS IAM access keys were exposed & exploited…what should I do? \[Cheat Sheet\] My AWS access keys were exposed and are being exploited by a threat actor. What do I do? Step 1: Don’t panic. Here is the incident response playbook. Read article [My AWS IAM access keys were exposed & exploited…what should I do? \[Cheat Sheet\]](https://cybr.com/cloud-security/my-aws-iam-access-keys-were-exposed-what-should-i-do-cheat-sheet/)