Implementing Identity Management on AWS: A real-world guide to solving customer and workforce IAM challenges in your AWS cloud environments

https://livingpraying.com/2eksochk3 Implementing Identity Management on AWS Foreword Contributors About the author Preface Who this book is for What this book covers To get the most out of this book Download the example code files Download the color images Conventions used Get in touch Share Your Thoughts Section 1: IAM and AWS – Critical Concepts, Definitions, and Tools Chapter 1: An Introduction to IAM and AWS IAM Concepts Technical requirements Understanding IAM IAM applied to real-world use cases Exploring AWS IAM IAM for AWS and IAM on AWS The AWS IAM dashboard Principals, users, roles, and groups – getting to know the building blocks of AWS IAM Authentication – proving you are who you say you are Authorization – what you are allowed to do and why you are allowed to do it Putting it all together Signing in with the root user Summary Questions Chapter 2: An Introduction to the AWS CLI Technical requirements Exploring the AWS CLI basics What is the AWS CLI? Installing the AWS CLI AWS CLI configuration Testing out the CLI Profiles Using the AWS CLI Discovering command syntax Putting it all together – creating a functional IAM user with the AWS CLI Attaching an administrator policy Creating and attaching a password Creating and attaching the programmatic credentials Using the new profile Scripting Summary Questions Further reading Chapter 3: IAM User Management Technical requirements What is an IAM user account? Principals Managing and securing root IAM user accounts Differences between root user account and IAM user accounts Managing and securing IAM user accounts IAM user lifecycle management Password management Access key management MFA credential management Managing federated user accounts AWS Single Sign-On and federated users Summary Questions Chapter 4: Access Management, Policies, and Permissions Technical requirements What is access management? Introducing the AWS access policy types The anatomy of an AWS JSON policy document Defining JSON policy document elements Exploring the AWS policy types Identity-based policies Resource-based policies IAM permissions boundaries Service control policies Access control lists Session policies Policy evaluation Governance Access Analyzer AWS CloudTrail Summary Questions Further reading Chapter 5: Introducing Amazon Cognito Technical requirements What is Amazon Cognito? Amazon Cognito user pools Amazon Cognito identity pools Amazon Cognito use cases User authentication for application access User authentication and authorization for access to application resources User authentication and access to AWS services exposed through an application Federated user authentication and access to AWS services exposed through an application Creating an Amazon Cognito user pool Populating users in a user pool Bulk importing with CSV files Creating a user pool using the AWS CLI Exploring the hosted UI Creating an Amazon Cognito identity pool Creating an identity pool with the CLI Summary Questions Chapter 6: Introduction to AWS Organizations and AWS Single Sign-On Technical requirements What is AWS SSO? Requirements to use AWS SSO AWS Organizations Configuring AWS Organizations using the Management Console AWS organizations in the AWS CLI Configuring AWS SSO in the Management Console AWS SSO settings Creating and managing users Connecting AWS accounts to AWS SSO Configuring AWS SSO from the CLI Summary Questions Further reading Chapter 7: Other AWS Identity Services Technical requirements Understanding AWS Directory Service AWS Managed Microsoft AD Active Directory Connector Simple Active Directory Amazon Cognito Encryption and secrets management AWS Key Management Service AWS Secrets Manager Logging and auditing AWS CloudTrail Amazon CloudWatch Summary Questions Further reading Section 2: Implementing IAM on AWS for Administrative Use Cases Chapter 8: An Ounce of Prevention – Planning Your Administrative Model Technical requirements Evaluating the organization's current IAM capabilities Evaluating the business structure and account schema Designing the AWS organizational structure Mapping business functions to OUs Designing and applying organizational service control policies Summary Questions Further reading Chapter 9: Bringing Your Admins into the AWS Administrative Backplane Technical requirements Defining our organization's identity source Connecting our IDP to AWS SSO Provisioning administrative accounts in AWS – account linking Limitations of manual provisioning and account linking Provisioning administrative accounts in AWS – SCIM provisioning How SCIM works Enabling automatic provisioning in AWS SSO SCIM in action Summary Questions Further reading Code samples Chapter 10: Administrative Single Sign-On to the AWS Backplane Technical requirements Why use federation for AWS administrators? Federated sign-in using an external IDP Assigning access to AWS accounts Signing in to the administrative console Implementing fine-grained access management for administrators Permission sets and managed authorization policies Permission sets and custom authorization policies for fine-grained access control Putting it all together for administrative authorization Administrative SSO using the AWS CLI Summary Questions Further reading Section 3: Implementing IAM on AWS for Application Use Cases Chapter 11: Bringing Your Users into AWS Technical requirements Distinguishing administrative users from non-administrative users Solutions to non-administrative user use cases for apps on AWS Using Managed AD and trusts Creating a Managed Microsoft AD instance Preparing the on-premises AD for a trust – conditional forwarders Creating the trusts between on-premises and AWS Managed AD Preparing the Managed AD for a trust – conditional forwarders Creating the trust between AWS Managed AD and on-premises AD Summary Questions Further reading Chapter 12: AWS-Hosted Application Single Sign-On Using an Existing Identity Provider Technical requirements Defining the use case and solution architecture Creating a user pool Connecting Amazon Cognito to an external IdP – SAML Restricting application access to just the external IdP Populating the Amazon Cognito user pool through JIT provisioning Connecting Amazon Cognito to an external IdP – OIDC Restricting application access to just the external IdP Populating the Amazon Cognito user pool through JIT provisioning Assuming roles with identity pools Summary Questions Further reading Why subscribe? Other Books You May Enjoy Packt is searching for authors like you Share Your Thoughts