World map

 

BM

World A1: Renting a Unit

IAM Identity Center or IAM users?

You will learn: how people should sign in for daily work, and the Free plan trap.

Checked with AWS 2026-11 on 1 Nov 2026

The problem

Aina joins Kedai Kancil to help with the website. How should she get into the AWS account?

Watch

IAM Identity Center: The mall's front desk: one sign-in, then a short-lived badge for each account you may enter. is the mall’s front desk. Staff sign in once and get a short-lived badge for each account. An IAM user: A person or app with its own long-lasting password or keys in one account. Use sparingly. is a copied key that lasts. Sort the facts.

Drag a card into a box. Or tap the card, then tap the box.

      Try it

      Set up the front desk for Aina. Put the steps in order.

      First step at the top. Put these in order. Use the arrows, or drag.

      • Create a user for Aina
      • Enable IAM Identity Center
      • Create an organization (AWS Organizations)
      • Aina signs in at the access portal, with MFA
      • Assign Aina and the set to the account
      • Make a permission set with the rights she needs

      Predict

      Your account is on the AWS Free plan. You create an organization for Identity Center. What happens?

      Check

      A solo learner who wants to stay on the Free plan. Good plan, or needs work?

      Swipe right for good, left for needs work. Or use the buttons.

      1 / 4

      Make one IAM user as my daily admin, with MFA.

      You did it!

      You can now choose how people sign in, and spot the Free plan trap.

      Go deeper (optional)

      Identity Center also has an “account instance” for one account. It serves apps only. It cannot give sign-ins to AWS accounts.

      AWS keeps IAM users for a few cases, like emergency access. Pick one path and do it:

      Real mission

      0 of 5 steps done · Your ticks are saved.