Amazon EC2 IAM
- Designed to make web-scale cloud and computing
- Define which accounts or AWS services can assume the role.
- Define which API actions and resources the application can use after assuming the role.
- Have the application retrieve a set of temporary credentials and use them.