How to create an IAM user in AWS

Postgraduate in Communications Engineering with working experience in the Support Desk and self-study in software development.
Search for a command to run...

Postgraduate in Communications Engineering with working experience in the Support Desk and self-study in software development.
What is EC2 Instance Store EC2 Instance Store is a type of storage that's physically attached to the host computer for the EC2 instance. Data on instance store volumes is temporary, meaning data can be lost if the instance stops, terminates, or fails...
The git log command is used to view the commit history of a Git repository. You can customize the output format to show specific details in a more readable or structured way. Below are some useful variations and formatting options for git log: To sh...

Overview This article will teach us how to: Install Ubuntu Server 24.04 on a laptop from scratch Install Ubuntu server by using Vagrant tool with ISO image Prerequisites: A laptop without any OS installed; A virtualization software Virtualbox t...

The /etc/passwd and /etc/shadow files are the backbone of Linux user management. Together, they store user account information and handle authentication securely. This article provides a hands-on guide to understanding these files, their structure, a...

In Linux, links are powerful tools that allow you to create references to files and directories. There are two main types of links: hard links and soft links (also known as symbolic links or symlinks). Understanding the differences between these two ...

A hostname is a human-friendly name given to a computer. It is a unique identifier that allows us to identify the machine in various network communications, making it easier to locate and manage devices. Type: hostname To see where it is stored, typ...

What is IAM?
Hands-on Lab Overview
Hands-on Lab
Step 1: Specify user details
Step 2: Set user permissions
Step 3: Set user tags
Step 4: Review and create the user
References
IAM (Identity and Access Management) is a global service provided by Amazon Web Services (AWS) that allows you to manage user identities and their permissions to access AWS resources. IAM helps you securely control access to various AWS services and resources within your AWS account.
IAM is a global service in AWS. This means that IAM is not specific to any particular AWS region and operates globally across all regions and availability zones.
Key features and concepts of IAM include:
Users: IAM enables you to create individual identities (users) for anyone who needs access to your AWS account. Each user is assigned a unique name and credentials for authentication.
Groups: Users can be organized into groups, making it easier to manage permissions for multiple users with similar access requirements. Permissions can be assigned to groups, and all users in the group inherit those permissions.
Roles: IAM roles are similar to users but are not associated with specific individuals. Instead, roles are assumed by entities such as EC2 instances, AWS Lambda functions, or even other AWS accounts. Roles are temporary and provide a way to delegate access to resources securely.
Policies: Policies are JSON documents that define permissions. They can be attached to users, groups, and roles to grant or deny access to AWS resources. Policies specify what actions are allowed or denied on which resources.
Access Keys: IAM users can have access keys associated with their account, which are used for programmatic access to AWS services using the AWS Command Line Interface (CLI), AWS SDKs, or other API calls.
Multi-Factor Authentication (MFA): IAM supports adding an extra layer of security to user accounts through MFA. MFA requires users to provide an additional authentication factor, such as a one-time password from a virtual or hardware MFA device, in addition to their regular password.
Integration with other AWS services: IAM integrates with various AWS services, enabling fine-grained control over access to resources. For example, IAM can be used to control access to S3 buckets, EC2 instances, RDS databases, and more.
In this hands-on lab, you will create an IAM user and admin group. You will add the IAM user to the admin group and assign an existing AdministratorAccess policy to the group.
To create an IAM (Identity and Access Management) user in AWS, follow these steps:
Sign in to the AWS Management Console: Go to the AWS Management Console (https://console.aws.amazon.com/) and sign in using your AWS account credentials.
Open the IAM service: Once signed in, search for "IAM" in the AWS Management Console search bar or locate and click on the "IAM" service under the "Security, Identity & Compliance" section.

Navigate to the IAM users page: In the IAM console, click on "Users" in the left-hand navigation pane.

Click on "Add user": On the IAM users page, click on the "Add user" button to start creating a new IAM user.

Step 1: Specify user details
Specify a username for the IAM user (e.g., "karla").

Step 2: Set user permissions
Create an admin group and attach the existing policies to the group to grant specific permissions:

Step 3: Set user tags (optional)
Step 4: Review and create the user
Review the provided information and make sure everything is correct.
Once you are satisfied, click on the "Create user" button to create the IAM user.

That's it! You have successfully created an IAM user in AWS.