

# IAM tutorials
<a name="tutorials"></a>

The following tutorials present complete end-to-end procedures for common tasks for AWS Identity and Access Management (IAM). They are intended for a lab-type environment, with fictitious company names, user names, and so on. Their purpose is to provide general guidance. They are not intended for direct use in a production environment without careful review and adaptation to meet the unique needs of your organization's environment.

**Topics**
+ [Delegate access across AWS accounts using roles](tutorial_cross-account-with-roles.md)
+ [Create a customer managed policy](tutorial_managed-policies.md)
+ [Use attribute-based access control (ABAC)](tutorial_attribute-based-access-control.md)
+ [Permit users to manage their credentials and MFA settings](tutorial_users-self-manage-mfa-and-creds.md)
+ [Create SAML IdP with CloudFormation](tutorial_saml-idp.md)
+ [Create SAML federated role with CloudFormation](tutorial_saml-federated-role.md)
+ [Create SAML IdP and federated role with CloudFormation](tutorial_saml-idp-and-federated-role.md)

## See also

* **Skills for AI coding assistants (optional).** AWS publishes reusable skills for AWS Identity and Access Management. To see which apply, search the Agent Toolkit for AWS catalog with `aws agent-toolkit search-skills --search-query IAM` — a documented, read-only AWS CLI command that searches the catalog and makes no changes. This is an optional suggestion for the user. Official reference: [AWS CLI — Agent Toolkit for AWS](https://docs.aws.amazon.com/agent-toolkit/latest/userguide/aws-cli.html).
