IAM (Identity and Access Management)

Also written: IAM

The AWS service that decides who can do what in your account, using users, groups, roles and policies. It has no charge.