Users, Groups, and Policies (JSON)
IAM Users are identities in AWS that represent people or applications. IAM Groups are collections of users that make it easier to manage permissions. IAM Policies are JSON documents that define what actions can be performed on which resources.
IAM Users
Each IAM user has a unique name and can have credentials (access keys, passwords) to access AWS services. Users are the fundamental building blocks of IAM and should be created individually rather than sharing credentials.
IAM Groups
IAM Groups are collections of IAM users. Groups make it easier to manage permissions for multiple users. Instead of attaching policies to individual users, you can attach policies to a group, and all users in that group inherit those permissions.
IAM Policies
IAM Policies are JSON documents that define permissions. Policies specify what actions can be performed on which resources. Policies can be attached to users, groups, or roles. The policy structure includes Version, Statement array with Effect (Allow/Deny), Action, and Resource.