SOFTWARE ENGINEERING

Detailed explanation-1: -Identity federation. Roles for cross-account access. Roles for Amazon EC2. Other AWS services.

Detailed explanation-2: -Temporary credentials in IAM are valid throughout their defined duration of time and hence can’t be revoked.

Detailed explanation-3: -However, instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it. Also, a role does not have standard long-term credentials such as a password or access keys associated with it.

Detailed explanation-4: -An IAM user is an entity that represents a person or application that interacts with AWS. It has specific credentials and permissions attached to it, like roles, to control access.