> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/integrations/resource-integrations/aws/installation-methods/iam.md).

# IAM

Configure the P0 AWS IAM management integration to provision users defined in the account's IAM service, matching them by user name or by an email tag.

Choose the **IAM** login type when your users are defined directly in the account's IAM service. P0 matches each requestor to an IAM user and grants access to that user. This is the default login type.

## Prerequisites

* An [AWS IAM management integration](/integrations/resource-integrations/aws/installation-methods.md) installed on the target account.

## Configure IAM provisioning

On the AWS IAM management configuration page, select **As AWS IAM users**, then choose how P0 identifies your users:

* **User name is user email**: Select this option if each user's IAM user name equals their email address. P0 matches users by user name.
* **User email in a tag**: Select this option if user names don't equal email addresses. P0 reads the email from a tag you specify.

### Match users by an email tag

If your IAM user names don't equal email addresses, add a tag to each user you want to allow access through P0, then give P0 the tag name. For example, with a tag named `Email`:

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-4c2aa55483017a1f04d21c18d56666603e01d055%2Fimage.png?alt=media" alt="AWS IAM user with an Email tag whose value is the user&#x27;s email address" width="375"><figcaption></figcaption></figure>

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-cb69737ae219aad5d53026d83277557f18ece858%2FScreenshot%202024-04-26%20at%209.29.46%E2%80%AFAM.png?alt=media" alt="P0 AWS configuration set to provision users as AWS IAM users with an email tag" width="459"><figcaption></figcaption></figure>

## Related

* [Requesting AWS access](/integrations/resource-integrations/aws/requesting-access.md)
* [Setting up AWS IAM management](/integrations/resource-integrations/aws/installation-methods.md)
