Further reading
- AWS IAM best practices (official)
- IAM Identity Center security best practices
- Use temporary credentials with AWS STS
- Enforce multi‑factor authentication (MFA)
- Audit activity with AWS CloudTrail
- Analyze permissions with IAM Access Analyzer
- Permission boundaries overview
- Service control policies (SCPs)