A few posts to read about.
Understanding the basics of the ever-feared AWS IAM (Identity and Access Management).