Best practices for using IAM Service - AWS

Question

Are there things that I need to keep in mind before I start using the IAM service provided by AWS? Any suggestions for best practices?

Answer 1

Keep the following in mind before you start using the IAM service:

• Never share your root access keys 
• Configure strong password policy
• Use roles for applications that run on EC2 instances
• Create individual users and use groups to assign permissions
• Enable MFA for limited privileged users