AWS Cloud Identity Federation & IAM

Overview

• Identity federation in AWS

AWS SSO

• Single Sign-On between Okta Universal Directory and AWS

AWS IAM/SAML

• Workshop: A Self-Directed Journey to AWS Identity Federation Mastery
• How to Establish Federated Access to Your AWS Resources by Using Active Directory User Attributes
• Creating a role for SAML 2.0 federation (console)

Cognito

• ENRICHING REQUESTS WITH AN AWS LAMBDA AUTHORIZER
• User Authentication For Web And iOS Apps With AWS Cognito (Part 1)
• User Authentication For Web And iOS Apps With AWS Cognito (Part 2)
• User authentication through authorization code grant type using AWS Cognito with sample projects

IAM

• How to use trust policies with IAM roles

• Video: Security groups: Deep dive

• AWS Documentation: Policy Evaluation Logic

• AWS IAM Deep Dive. Chapter 3: Credential evaluation, Principals, Conditions, Policy variables

• AWS IAM Deep Dive. Chapter 4: Policy Evaluation Logic, Permission Boundaries, Identity Federation

• AWS IAM Policies in a Nutshell

• AWS Policy Generator

AWS Directory Services

• Migrating Microsoft Workloads to AWS
• Everything you wanted to know about trusts with AWS Managed Microsoft AD
• Securely extend and access on-premises Active Directory domain controllers in AWS