Access management is a vital pillar of Amazon Web Services (AWS) security. Examine the concept of access management, with a focus on Identity and Access Management (IAM). In this course, explore bastion hosts, Appstream 2.0, CLI (command-line interface) Access, Single-Sign-on (SSO), and Cognito. Learn about password policies that apply to IAM users. A bastion host is a system whose goal is to offer secure access to a private network from an external network like the Internet, designed and configured to withstand attacks. Appstream 2.0 is a streaming service that provides users with instant access to their desktop applications from anywhere. CLI Access is a text-based user interface used to view and manage computer files. SSO is a cloud-based single sign-on service that makes it easy to centrally manage SSO access to all of your AWS accounts and cloud applications. Amazon Cognito provides authentication, authorization, and user management for web and mobile apps. This course is one of a collection of courses that prepares learners for the AWS Certified Cloud Practitioner 2019 certification.