- A Cloud Guru
Creating Users and Groups with Custom Policies in IAM
We have three new hires for our latest project, and we need to make sure they have the permission to access specific services. We also want to ensure that any future hires can be easily added to the same permissions. In order to do this, we will dive into the IAM, or Identity and Access Management service. We will create a custom policy for several users and a group to put them in.
Table of Contents
Create a Custom Policy
- Navigate to the IAM service in the AWS console.
- Select Policies and click Create Policy.
- Click on Choose a service and type in API to select API Gateway.
- Select all permissions for the API Gateway and select all resources.
- Click on Add another service and choose a service. Type in EC2 and select EC2 from the list.
- Select List permissions for EC2 and select all resources.
- Click on Add another service and choose a service. Type in S3 and select S3 from the list.
- Select List permissions for S3 and select all resources.
- Complete the creation of the policy by naming it CustomPolicy.
Create Users and Group
- Click on Users.
- Create three users: Lisa, Xavier, and Edmond.
- Specify a password for the users.
- Create a group named Project1 and specify the CustomPolicy that was created in the last step to be used.
- Complete creating the users.
Test Permissions of the Users
- Sign out of the AWS console.
- Copy and paste the link for the AWS environment provided to you in this lab.
- Use the Lisa user and the password you specified for that user.
- Once signed in, navigate to the API Gateway to view permissions.
- Navigate to the EC2 service and click on the running instance.
- View actions available for that instance.
- Navigate to the S3 service and test out various options to test permissions.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.