What Are the Differences Between the Permissions of an Account and Those of IAM Users?

If you need many accounts within your organization, you can create IAM users and manage them effectively.

An account can allocate funds to IAM users so that IAM users can manage resources independently.

Both an account and its IAM user can create IAM users. An account can only manage its own IAM users but cannot manage the IAM users of other accounts.

An account and its IAM users are equally used. Their differences lie in what permissions you assign to them.

For details about WAF account permissions, see Permissions Management.