• use access keys to access AWS APIs
• together with

2 types:

• root based (not recommended)
• IAM based (users/groups)