How AWS IAM role manager rethinks the starting point for IAM roles
Brief
When you build a new application or capability on Amazon Web Services (AWS) , you want to focus on what you’re building. Getting a service running almost always begins with AWS Identity and Access Management (IAM) . Many AWS services that act on your behalf need an IAM role, an identity the service assumes to access your resources with a defined set of permissions.
You then author a trust policy so the service can assume the role, choose the permissions the workload needs, and attach it. Configuring roles and policies for common patterns is repeatable work that doesn’t need to be manual.
IAM role manager does that work for you. When role manager is enabled, AWS creates and configures the IAM roles as you build in supported service consoles, so you can start using a service and let AWS handle the role behind it.