Serverless Developer Guide
For help signing in using an IAM Identity Center user, see Signing in to the AWS access portal in 
the AWS Sign-In User Guide.
Assign access to additional users
1. In IAM Identity Center, create a permission set that follows the best practice of applying least-
privilege permissions.
For instructions, see  Create a permission set in the AWS IAM Identity Center User Guide.
2. Assign users to a group, and then assign single sign-on access to the group.
For instructions, see  Add groups in the AWS IAM Identity Center User Guide.
A common confusion arises when signing in to AWS. Remember, for day to day activities, you 
should not be signing in as the root user.
Principals
IAM implements authentication, proving who an entity claims to be, with principals, which are 
entities such as IAM users, federated users from Google, Facebook, etc, IAM roles, AWS accounts, 
and AWS services.
Fundamentals 39