- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Cloud
- Security
Delegating Administrative Access Using IAM Roles
In this AWS hands‑on lab, you will delegate elevated administrative access by creating and using a custom IAM role. You will define the role’s permissions, configure a trust policy that allows an authorized principal to assume it, and then switch to the role to obtain temporary credentials. By the end of the lab, you will have validated that delegated access works as intended by performing allowed administrative actions while keeping long‑lived credentials restricted.
Lab Info
Table of Contents
-
Challenge
Create a custom IAM role with administrator permissions
Create an IAM role that grants full administrative access and configure it to be assumable by a non-administrative user.
- Create a new IAM role with the AdministratorAccess policy attached.
- Configure the trust policy to allow a specific non-admin IAM user to assume the role.
-
Challenge
Sign in as a non-administrator user
Enable and access the AWS Management Console using a non-administrator IAM user account.
- Create the console password for the non-administrator IAM user.
- Log in to the console as the non-admin user.
- Attempt to list S3 buckets and observe that access is restricted, confirming the user’s limited permissions.
-
Challenge
Assume the role and obtain a role session
Switch roles within the AWS Management Console to gain temporary administrative access.
- Switch roles and assume the previously created administrative role.
- Provide the role name and account ID as required during the switch.
- Confirm that the console now reflects the assumed role session.
-
Challenge
Validate delegated administrative access with the assumed role
Confirm that the assumed role provides the intended administrative permissions.
- While operating under the assumed role, attempt to view S3 buckets in the AWS Management Console.
- Verify that the action succeeds, confirming that administrative access has been delegated correctly.
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.