AWS Identity and Access Management (IAM) is the service that controls authentication and authorization across AWS, defining who can access which resources under what conditions. Administrators create users, groups, roles, and fine-grained policies to enforce least-privilege access. Its role-based, temporary-credential model is central to secure AWS architectures and integrates with nearly every AWS service.