> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Identity and Access Management (IAM)

> CoreWeave's Identity and Access Management system for controlling access to Cloud Platform resources

CoreWeave Identity and Access Management (IAM) controls access to Cloud Platform resources using [IAM Access Policies](/security/iam/access-policies). These policies define which principals (users or groups) are allowed to perform specific actions across CoreWeave services.

There are also separate authorization mechanisms for the following services:

| Authorization Area                                                                                                                                                                                                             | Description                                                                                                                                            |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| The [AI Object Storage S3-compatible API](/products/storage/object-storage/reference/object-storage-s3), which is governed by [organization and bucket access policies](/products/storage/object-storage/auth-access/policies) | Controls access to data in CoreWeave AI Object Storage.                                                                                                |
| CKS [authorization within clusters](/products/cks/auth-access/managed-auth/kubeconfig)                                                                                                                                         | Access and roles for Kubernetes resources managed by CKS.                                                                                              |
| SUNK cluster access, managed through [SUNK User Provisioning (SUP)](/products/sunk/manage_sunk/manage_cluster_access/sunk_user_provisioning)                                                                                   | SUP provisions CoreWeave IAM user and group data into POSIX identities in the cluster. IAM Access Policies do not directly govern SUNK cluster access. |

## Next steps

* Learn about [IAM Access Policies](/security/iam/access-policies).
* Create an [IAM Access Policy](/security/iam/access-policies/manage).