Skip to main content

IAM Users and Groups Hands On

Maarek focuses on the practical application of managing IAM users and groups within AWS.

Key takeaways​

  • IAM Overview: IAM is a global service for managing users and permissions in AWS, accessible across all regions.
  • Root Account Caution: Root account should not be used for daily operations. Best practice is to create individual IAM users instead.
  • Creating IAM Users: The process for creating a new IAM user includes entering a username and setting up console access with a custom password.
  • Password Management: There's an option to require a password change upon the first sign-in for security.
  • Permission Management: Administrator access can be simplified by creating an admin group, allowing users to inherit permission easily.
  • Use of Tags: Tags can be utilized for organizing and managing AWS resources effectively.
  • Multi-Account Management: Using a private browser window can help manage multiple AWS account simultaneously, other option will be discussed in the next section.
  • Credential Management: Keeping track of root and IAM user credentials is important to avoid complications.

Personal Notes​

  • I created a new IAM user for myself
  • I created a new IAM group called admin, then assigned the AdministratorAccess policy to it, and added myself to the group.
  • I also created an account alias called rendy-aws for easier login access. https://rendy-aws.signin.aws.amazon.com/console