The Conjur IAM Authenticator allows an AWS resource to use its AWS IAM role to authenticate with Conjur. This approach enables EC2 instances and Lambda functions to access DevOps credentials stored in Conjur without a pre-configured Conjur identity. This simplifies identity management within organizations by reducing the overall number of identities and providing organizations with a single source of truth approach. Note: this integration is for Open Source deployment of Conjur Secrets Manager. An Enterprise-grade Conjur IAM Authenticator is separately available.