// Module included in the following assemblies:
//
// * rosa_install_access_delete_clusters/rosa_getting_started_iam/rosa-aws-prereqs.adoc

:_mod-docs-content-type: CONCEPT
[id="rosa-policy-iam_{context}"]
= Red{nbsp}Hat managed IAM references for AWS

[role="_abstract"]
Red{nbsp}Hat is responsible for creating and managing the following Amazon Web Services (AWS) resources: IAM policies, IAM users, and IAM roles.

[id="rosa-iam-policies_{context}"]
== IAM Policies

[NOTE]
====
IAM policies are subject to modification as the capabilities of {product-title} change.
====

* The `AdministratorAccess` policy is used by the administration role. This policy provides Red{nbsp}Hat the access necessary to administer the {product-title} (ROSA) cluster in the customer's AWS account.
+
----
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": "*",
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}
----

[id="rosa-iam-users_{context}"]
== IAM users

The `osdManagedAdmin` user is created immediately after installing ROSA into the customer's AWS account.
