AWS IAM allows you to grant granular permissions to AWS resources using policies.

AWS is responsible for the security OF the cloud, while customers are responsible for security IN the cloud.