You can use AWS IAM to manage access to the Amazon Location Service Console, APIs, and resources, including trackers, geofence collections, and API keys. API keys are an Amazon Location specific authentication mechanism enabled for Maps, Places, and Routes. In general, IAM is more aligned with backend service use cases and API keys are more aligned with web and mobile usage. API keys enable direct calls from web and mobile applications and allow improved performance from increased edge caching. Combining IAM with Amazon Cognito provides another useful option for web and mobile usage for all APIs including for Trackers and Geofences. You can also bring your own authentication stack and use it along with Cognito without the need to duplicate user identities.
Amazon Location Service also integrates with AWS Key Management Service (KMS), enabling the use of your existing keys to encrypt your tracking and geofencing data.
To learn more, please visit the Authentication section of our Developer Guide.