aws sts get-caller-identity

• Mapping fine-grained IAM actions reference

• Use scripts to bulk migrate your policies to use fine-grained IAM actions

• OpenID Connect OICD

• IAM Identity Center

  • What is IAM Identity Center?

  • Video on Update to Identity Center

• Service Control Policies (SCP)

  • Deny by region

  • SCP Examples

• Assume Identity

  aws --profile ni-dev iam create-access-key --user-name bob
  
  # Add key/secret to ~/.aws/
  # run with that profile
  aws --profile bob eks update-kubeconfig --region us-west-2 --name mycluser