IAM (identity and access management)

Also written: IAM, IAM policy, IAM policies

The AWS service and practice of managing users, roles and their permission policies. An IAM policy can even limit reads by object tag.