AWS Certified Cloud Practitioner

Explanation

AWS Identity and Access Management (IAM) is the correct service for creating and modifying AWS user permissions. Here's why:

• AWS IAM is specifically designed for identity and access management, allowing administrators to:

  • Create and manage AWS users and groups
  • Define permissions using policies
  • Control access to AWS services and resources
  • Manage authentication and authorization

• AWS Config is a service for assessing, auditing, and evaluating AWS resource configurations

• AWS CloudTrail is a service for logging API calls and account activity

• AWS Key Management Service (KMS) is for creating and managing encryption keys

IAM provides the centralized access control mechanism for AWS, making it the appropriate service for user permission management.