Hermes Wiki
Tools/IAM

IAM (Identity and Access Management)

Core AWS service controlling authentication and authorization via Users, Groups, Roles, and JSON policies — the foundation for least-privilege access across every other AWS service. No single open-source product replicates AWS's own resource-scoped policy engine; the closest self-managed combination pairs an identity provider like Keycloak (authentication) with Open Policy Agent (OPA) (policy-as-code authorization decisions) — the most-used OSS approach to the same authn+authz split IAM provides natively.

Hermes Wiki