In Identity and Access Management, which component controls how users and groups in the account are given permission to access and take actions on account resou...