AWS Identity and Access Management
E293759
AWS service
access management service
authentication and authorization service
cloud security service
AWS Identity and Access Management is a security service that enables you to securely control and fine-tune user and programmatic access to AWS resources through policies, roles, and permissions.
All labels observed (5)
| Label | Occurrences |
|---|---|
| AWS Identity and Access Management canonical | 29 |
| AWS IAM | 7 |
| AWS IAM policies | 1 |
| AWS IAM users | 1 |
| S3 Access Grants | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T2714029 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: AWS Identity and Access Management Context triple: [Amazon Web Services, offersService, AWS Identity and Access Management]
-
A.
Cloud IAM
Cloud IAM is Google Cloud’s identity and access management service that lets administrators define and enforce who can access specific cloud resources and what actions they can perform.
-
B.
Aws
Aws was one of the major Arab tribes of Medina that played a pivotal role in supporting Prophet Muhammad and the early Muslim community after the Hijrah.
-
C.
Amazon CloudWatch
Amazon CloudWatch is a monitoring and observability service that collects and analyzes logs, metrics, and events from AWS resources and applications to help track performance and operational health.
-
D.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
-
E.
AWS
AWS is a train protection and warning system used on railways to alert drivers to signal aspects and speed restrictions, enhancing operational safety.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: AWS Identity and Access Management Target entity description: AWS Identity and Access Management is a security service that enables you to securely control and fine-tune user and programmatic access to AWS resources through policies, roles, and permissions.
-
A.
Cloud IAM
Cloud IAM is Google Cloud’s identity and access management service that lets administrators define and enforce who can access specific cloud resources and what actions they can perform.
-
B.
Aws
Aws was one of the major Arab tribes of Medina that played a pivotal role in supporting Prophet Muhammad and the early Muslim community after the Hijrah.
-
C.
Amazon CloudWatch
Amazon CloudWatch is a monitoring and observability service that collects and analyzes logs, metrics, and events from AWS resources and applications to help track performance and operational health.
-
D.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
-
E.
AWS
AWS is a train protection and warning system used on railways to alert drivers to signal aspects and speed restrictions, enhancing operational safety.
- F. None of above. chosen
Statements (59)
| Predicate | Object |
|---|---|
| instanceOf |
AWS service
ⓘ
access management service ⓘ authentication and authorization service ⓘ cloud security service ⓘ |
| alsoKnownAs |
AWS Identity and Access Management
ⓘ
surface form:
AWS IAM
|
| configurationInterface |
AWS CLI
ⓘ
AWS Management Console ⓘ AWS SDKs ⓘ infrastructure as code tools ⓘ |
| hasAbbreviation | IAM ⓘ |
| integratesWith |
AWS CLI
ⓘ
AWS CloudFormation ⓘ AWS CloudTrail ⓘ AWS Management Console ⓘ AWS Organizations ⓘ AWS SDKs ⓘ AWS Security Token Service ⓘ AWS Single Sign-On (IAM Identity Center successor) ⓘ AWS Cognito ⓘ
surface form:
Amazon Cognito
|
| policyLanguage | JSON ⓘ |
| policyType |
identity-based policies
ⓘ
permissions boundaries ⓘ resource-based policies ⓘ service control policies (via AWS Organizations) ⓘ |
| primaryFunction | manage access to AWS resources ⓘ |
| providedBy | Amazon Web Services ⓘ |
| scope |
account-level access control
ⓘ
resource-level access control ⓘ |
| securityGoal | protect AWS resources from unauthorized access ⓘ |
| supports |
fine-grained access control
ⓘ
programmatic access management ⓘ user access management ⓘ |
| supportsAuthentication |
MFA-based authentication
ⓘ
federated SSO authentication ⓘ password-based authentication ⓘ |
| supportsFeature |
access advisor
ⓘ
access analyzer ⓘ conditions in policies ⓘ credential report ⓘ cross-account access ⓘ federated access ⓘ inline policies ⓘ least privilege access ⓘ managed policies ⓘ multi-factor authentication ⓘ password policy enforcement ⓘ policy versioning ⓘ role assumption ⓘ service-linked roles ⓘ tag-based access control ⓘ |
| uses |
X.509 certificates
ⓘ
access keys ⓘ federated identities ⓘ groups ⓘ permissions ⓘ policies ⓘ roles ⓘ temporary security credentials ⓘ users ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: AWS Identity and Access Management Description of subject: AWS Identity and Access Management is a security service that enables you to securely control and fine-tune user and programmatic access to AWS resources through policies, roles, and permissions.
Referenced by (39)
Full triples — surface form annotated when it differs from this entity's canonical label.
this entity surface form:
S3 Access Grants
this entity surface form:
AWS IAM
this entity surface form:
AWS IAM
this entity surface form:
AWS IAM
this entity surface form:
AWS IAM
this entity surface form:
AWS IAM
this entity surface form:
AWS IAM
this entity surface form:
AWS IAM policies
this entity surface form:
AWS IAM users
this entity surface form:
AWS IAM