IAM
- users
- groups
- roles
- policies
	- apply policies to above 3
	- users will inherit groups policies automatically
	- Policies are JSON
- IAM is universal (not region specific)
- Users have no permissions when first created (least privileges)