Understand the IAM toolsets, capabilities, and paradigms of the AWS platform and learn how to apply practical identity use cases to AWS at the administrative and application level

Key Features

• Learn administrative lifecycle management and authorization
• Extend workforce identity to AWS for applications deployed to Amazon Web Services (AWS)
• Understand how to use native AWS IAM capabilities with apps deployed to AWS

Book Description

AWS identity management offers a powerful yet complex array of native capabilities and connections to existing enterprise identity systems for administrative and application identity use cases. This book breaks down the complexities involved by adopting a use-case-driven approach that helps identity and cloud engineers understand how to use the right mix of native AWS capabilities and external IAM components to achieve the business and security outcomes they want.

You will begin by learning about the IAM toolsets and paradigms within AWS. This will allow you to determine how to best leverage them for administrative control, extending workforce identities to the cloud, and using IAM toolsets and paradigms on an app deployed on AWS. Next, the book demonstrates how to extend your on-premise administrative IAM capabilities to the AWS backplane, as well as how to make your workforce identities available for AWS-deployed applications. In the concluding chapters, you'll learn how to use the native identity services with applications deployed on AWS.

By the end of this IAM Amazon Web Services book, you will be able to build enterprise-class solutions for administrative and application identity using AWS IAM tools and external identity systems.

What you will learn

• Understand AWS IAM concepts, terminology, and services
• Explore AWS IAM, Amazon Cognito, AWS SSO, and AWS Directory Service to solve customer and workforce identity problems
• Apply the concepts you learn about to solve business, process, and compliance challenges when expanding into AWS
• Navigate the AWS CLI to unlock the programmatic administration of AWS
• Explore how AWS IAM, its policy objects, and notational language can be applied to solve security and access management use cases
• Relate concepts easily to your own environment through IAM patterns and best practices

Who this book is for

Identity engineers and administrators, cloud administrators, security architects, or anyone who wants to explore and manage IAM solutions in AWS will find this book useful. Basic knowledge of AWS cloud infrastructure and services is required to understand the concepts covered in the book more effectively.

Table of Contents

1. An Introduction to IAM and AWS IAM Concepts
2. An Introduction to the AWS CLI
3. IAM User Management
4. Access Management, Policies, and Permissions
5. Introducing Amazon Cognito
6. Introduction to AWS Organizations and AWS Single Sign-On
7. Other AWS Identity Services
8. An Ounce of Prevention – Planning Your Administrative Model
9. Bringing Your Admins into the AWS Administrative Backplane
10. Administrative Single-Sign On to the AWS Backplane
11. Bring Your Users into AWS
12. AWS-Hosted Application Single Sign-On Using an Existing Identity Provider

About the Author

Jon Lehtinen has 16 years of enterprise identity and access management experience and specializes in both the strategy and execution of IAM transformation in global-scale organizations such as Thomson Reuters, General Electric, and Apollo Education Group. In addition to his work in the enterprise space, he has held positions on Ping Identity’s Customer Advisory Board and as an advisor to identity verification start-up EvidentID. He currently owns the workforce and customer identity implementations at Okta.

Jon is dedicated to the growth and maturity of IAM as a profession and serves on the Board of Directors for IDPro org. He is also a member of the Kantara Initiative, ISC2, OpenID Foundation, and Women in Identity. Jon has presented his work at several conferences, including RSA, Identiverse, and KuppingerCole’s European Identity and Cloud Conference.

Currently, he owns Okta’s workforce and customer IAM implementations as their Director of Okta on Okta.