DEV Community

Pearl
Pearl

Posted on

A Beginner's Guide: AWS IAM User, Group, and Role Management Tutorial

Hey there, fellow cloud enthusiasts!

I'm super excited to share a little project with you all today, inspired by our last class on cloud computing. If you're ready to dive into some hands-on cloud action, you're in the right place! We'll be walking through a series of fun tasks that will help you get familiar with AWS IAM (Identity and Access Management), user groups, policies, and even organization setup. So, buckle up and let's embark on this cloud adventure together!

Here's a break down of the steps:

Step 1 - Creating a User:

Log in to the AWS Management Console (as an IAM user).
Navigate to the IAM (Identity and Access Management) dashboard.
Click on "Users" in the left navigation panel.
Click on "Add user" button.
Enter the username and follow the prompts to complete the user creation process.

Snapshot of creating a user in AWS

Step 2 - Creating a Group and Adding User:
In the IAM dashboard, click on "Groups" in the left navigation panel.
Click on "Create group" button.
Enter the group name as "DevTeamLagos" and click "Next step".
Search for and select the user you created in step 1.
Click "Next step" and then "Create group.

Snapshot of creating a group in AWS

Step 3 - Attaching Policies to Group (DevTeamLagos):
In the IAM dashboard, click on "Groups" in the left navigation panel.
Search for and click on the "DevTeamLagos" group.
Click on the "Permissions" tab.
Click "Attach policies" button.
Search for and select the policies named "IAMFullAccess", "AmazonVPCFullAccess", and "AmazonS3FullAccess".
Click "Attach policy" to add these policies to the group.

Snapshot of Permission policies that the user in the group has access to

Step 4 - Creating a Custom Managed Policy:
In the IAM dashboard, click on "Policies" in the left navigation panel.
Click on "Create policy" button and follow the prompts to complete this process.

Snapshot of creating a custom managed policy

Step 5 - Creating an Organization and Adding Accounts (Developer and Operations accounts):
Go to the AWS Organizations dashboard.
Click on "Create organization".
Follow the prompts to create the organization.
Once the organization is created, navigate to "Accounts" section.
Click on "Add account" and follow the prompts to add the Developer and Operations accounts.

Snapshot of creating an organization and adding accounts

Step 6 - Switching Roles Between Accounts (Developer and Operations accounts):
Go to the IAM dashboard of your main AWS account.
Look for the "Switch Role" option in the left navigation panel.
Enter the AWS account ID of the Developer or Operations account.
Enter the name of the IAM role you want to assume in that account (e.g., "Developer" or "Operations").
Enter the color you prefer.
Click "Switch Role" to switch to the selected account and role.

Snapshot of switching roles between accounts

We have just completed a whirlwind journey through the world of AWS IAM, user groups, policies, and organizational setup. Give yourself a pat on the back for leveling up your cloud computing skills!

But hey, the cloud adventure doesn't end here! Keep exploring, tinkering, and unleashing your creativity in the cloud. Remember, the sky's the limit!

Catch you on the next cloud-powered adventure! Until then, happy clouding!

Top comments (0)