A bundle of permissions granted to a service or a temporary user.
A mechanism that holds no long-term credentials, instead issuing and using temporary security credentials -- the standard way to grant permissions to an AWS service itself, such as EC2 or Lambda.
© 2026 ITBGM