IAM users are people or services that interact with AWS. We actually set up a new user in Chapter 1, Serverless Microservices Architectures and Patterns. They can have access to the AWS Management Console via a password with multi-factor authentication, and/or they may have an access key for programmatic access using the command-line interface or the AWS software development kits (SDKs). You can attach one or more IAM policies directly to a user to grant them access to a resource or service. A policy could be like what we have just shown you, for granting read access to a DynamoDB table called Books from a specific originating IP range.