Create an IAM users and groups

AWS Identity and Access Management (IAM) enables you to securely control access to AWS services and resources for your users.With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users can access.

Service used:

* IAM service

Project Objectives

• Create IAM groups
• Create IAM users
• Use IAM credentials to log in as created users

Step 1: Logging In to the Amazon Web Services Console

login to the Amazon Web Services Console using credentials.

Step 2 : Creating an IAM User Group

1. In the AWS Management Console search bar, enter IAM, and click the IAM result under Services.

2. From the IAM dashboard, click on User groups link in the sidebar menu.

3. Click on the Create Group blue button for creating a new IAM group.

4. In the User group name field, enter DevOps as the name of the group.

5. Skip down to the Attach permissions policies section, enter AmazonEC2ReadOnlyAccess into the search bar and select the resulting policy AmazonEC2ReadOnlyAccess.

6. Click Create Group.

In this step, we used the IAM Management console to create an IAM group.

Step 3: Creating an IAM User

1. From the Identity & Access Management console, click on Users in the sidebar menu.

2. Click Add users to begin creating a new user.

Note: You can create up to 10 users at a time with usernames that don't exceed 64 characters.

3. Enter the following values in the form:

   • User name: John (Name must be case sensitive)
   • Provide user access to the AWS Management Console: Checked
   • Console password: Autogenerated password
   • Users must create a new password at next sign-in: Unchecked

4. Click Next

5. Under User groups, select the DevOps group.

6. Click Next.

7. Review the configuration and click Create user.

8. Click Download .csv file,

9. Click Return to users list to see the newly created user.

In this step, we used the IAM Management console to create an IAM user and attach it to an IAM group.

Step 4: Logging in using the new IAM credentials

1. Click John on the IAM User page.

2. Click Security Credentials and then navigate to the Console sign-in link listed in the tab.

3. Use the credentials in the CSV file you downloaded to log in as John.

In the Console enter:

* Username: Enter John
* Password: Enter the password from the spreadsheet you downloaded earlier

5. From the AWS Management Console, click on Services at the top of the page and type S3 into the text box. Select the S3 option.

6. Notice that due to the restrictive permissions you placed on the IAM user "John", the buttons are greyed out.

In this step, you logged in as your newly-created IAM user. You also confirmed that your restrictive IAM permissions worked and that your new user didn't have access to unnecessary AWS resources.