The internet is rife with 'authentication vs. authorization'-type questions. I'm not asking that here. I'm wondering if there is some overarching term that encompasses both of these.
I've seen authentication referred to as 'identity management', and authorization referred to as 'access control'.
But even AWS didn't have a good term for both of these together, so it created IAM.
So again, if authentication is proving who (as a principal) you are, and authorization is about giving that authenticated principal access levels, then I'm looking for an umbrella security term that applies to both (hence, governing who can do what for a particular resource). Does this exist?!