[AWS] IAM Best Practices

• Lock away your AWS account root user access keys
• Create individual IAM users
• Use groups to assign permissions to IAM users
• Grant least privilege
• Get started using permissions with AWS managed policies
• Use customer managed policeis instead of inline policies
• Use access levels to review IAM permissions
• Configure a strong password policy for your users
• Enable MFA
• Use role for applications that run on Amazon EC2 instance
• Use role to delegate permissions
• Do not share access keys
• Rotate credentials regularly
• Remove unnecessary credentials
• Use policy conditions for extra security 
• Monitor activity in your AWS account