IAM is used to securely control individual and group access to AWS resources. Groups are
collections of users and have policies attached to them. You can use IAM to attach a policy
to a group
Amazon Cognito is used for authentication using mobile apps
The AWS Security Token Service (STS) is a web service that enables you to request temporary,
limited-privilege credentials for IAM users or for users that you authenticate (federated
users)
AWS Shieldis a managed Distributed Denial of Service (DDoS) protection
service that safeguards applications running on AWS