- Policies
- IAM policies are attached to users, roles or groups which grant access to various AWS services or full access to AWS(god-mode)
- Users
- Users can attached to groups and policies can be attached to groups so each user may have their own unique policies besides their group policies.
- Roles
- Roles are created to be attached to EC2 instances, for example, I can create an S3-Admin-Access role which I will attach to my EC2 isntance, so it can read and write to my S3 bucket