What is AWS IAM in AWS?

AWS Identity and Access Management controls identities, roles, policies, and permissions across AWS. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.