What is the name of the AWS service that allows you to defin…

What is the name of the AWS service that allows you to define fine-grained access rights, like who can access resources which resources can be accessed and what the user can do to the resource how resources can be accessed?  _______ (give the abbreviation or the full name)