Roles
- Or you might want to allow a mobile app to use AWS resources, but not want to embed AWS keys within the
app (where they can be difficult to rotate and where users can potentially extract them).
Sometimes you want to give AWS access to users who already have identities defined outside of AWS, such as in your corporate
directory. Or, you might want to grant access to your account to third parties so that they can perform an audit on your resources.