Hi, everyone, and welcome back.
Now, in today's video, we are going to discuss about some of the important concepts and considerations
that you need to keep in mind if you are planning to use the IAM Identity center.
So let's go ahead and get started.
Now, one of the important prerequisites for the identity center is that your account must be managed
by a plus organization.
Now in case if you have the organizations, you have to ensure that all the features are enabled as
part of organization.
However, in case if you do not have the organizations enabled, when you enable the IAM Identity center,
you can choose to create the organizations as well.
So this is a pretty straightforward process.
The second important point and consideration is related to the identity source.
Now you have to note that if you're already managing the users and groups in the Active Directory,
which you will generally see in a lot of organizations, then as part of the identity center, it is
recommended that you associate the Active Directory with it.
Avoid creating new users and groups in the identity store associated with the identity center.
Unnecessarily, it will duplicate things and it will make things much more difficult to manage.
And the second point, as we already know, in case if you do not have a centralized identity store,
you also have option to create the users and groups directly as part of the identity center.
The third important part is related to the permission sets at a high level overview.
The permission sets define the level of access that the users in the identity center have to their accounts.
For example, you see that there are two users.
You have an Alice user, you have a Bob user, you also have a permission sets that is part of the identity
center.
And in the permission sets you have certain set of access details.
For example, Alice has a read only access to dev and stage account.
Bob has an admin access to all of the accounts depending upon the permission sets.
When Alice or Bob logs into their access portal, they will be seeing the appropriate accounts and the
permissions will be applied accordingly.
So in fact, before we proceed, let's quickly look into this.
Now, within the identity center, you have a specific option related to the permission sets.
Now, if you'll click here, you will see that I have one permission set call as an administrator access.
In this, I have a specific managed policy call as the administrator access and as part of the permission
sets.
You also have accounts so you can configure which accounts you need to integrate as part of your overall
permission.
Apart from that, in case if you'd like, you can also go ahead and create your own set of policies.
You can create an inline policy, etc..
All right.
So I hope with this you understood the basics of permission sets.
Now, before we conclude, let's also look at a high level overview on how the entire process works.
So at this stage, let's assume that there are two accounts.
You have a green account and you have a red account.
Now the first part is you deploy the identity center.
Once the identity center is deployed, you go ahead and define permission sets.
It can be read only permission, it can be administrator access and so on.
And then once the permission sets are created and they are associated with the account behind the scenes,
what happens is that these permissions sets, it creates a iam role into each of the account and the
user.
They can assume this specific role and they can log into the account and the permissions will be granted
accordingly.
Now, let me, in fact, quickly show you this.
So as we're discussing that our permission set of administrator access has a specific policy, college
administrator access here.
And this is associated with two accounts.
One of the accounts is where I'm also logged in.
So let's quickly go to the IAM console and see on how it has created the role.
So if I go to roles, you see there is one specific role call is reserved, so administrator access
role and if we open this role it has the administrator access grid.
So these are some of the important pointers to note specifically for the identity center.
And with this will conclude today's video.