IAM ist das Identity And Access Management von AWS.
In AWS, service roles are used to grant permissions to an AWS service so it can access AWS resources.