IAm AWS guide

It is service of aws of it contain the

• user
  who login in the aws account is called user
  user have direct permission if no of permission(service) to the user

• group
  group of user of have permission like if i have a ec2 group if any user put in this group they have ec2 permission to used their service

• permission
  you assigned the permission to the user what they access and can not access the service of aws

Note- user have direct permission and group permission

Here are two type of permission

1. login access
2. service access

Now two ways to login in aws account
gui- type username and password
cli- access key and secret key (Teraform)

Create the User and gave to login acces

go to the iam service and create a user
and select the next

and select the next

and select the next

Login permission assign to the user

click inside the user when user is created

and clicked the security credential

and click the enable console access

They three option first is automatic generated password second is usergenerated password third when we login the come the pop up set your password
we select the usergenerated password

and download the csv file

How to cli access

In the security credential inside the downside
you found the access key

select the command line interface

and acknowledge and select the next

and create the access key

How to create a group and How to attached the permission these group and Add user to these group

Create a user group

and type the group name and i type the ec2 group

and the last create a group

Here you see the group is created

go inside the group you have see the option add user

i select the sachin user

can you see user inside the group in ec2

Now we apply the permission

Inside the permission click policy and click the attached policy

and search the ec2 and on the ec2 full permission

and click attached policy in the last

and we should login the user account and

that image show without policy

and refresh the account
that image apply the ec2 policy

Direct permission to the user

i apply the direct permission to the user when we policy of sns attched the sachin user

go inside the sachin user

add permission click

select attached policy directly

search sns and tick the sns full permission and click and next and add permission

see that you have two permission sns and ec2 and you inside the ec2 group

How to removed the user (sachin) in group

Go inside the usergroup select the sachin and removed

Note sachin is removed the ec2 group so it lost ec2 permission but they have sns permission

How to recover user password if you forgot

Go inside the user and select the security credential
and click the managed the security credential and popup open

and popup have two option
if disable the user when if they can not the access and reset the password
i choose reset the password and revoke why another user is login and they automatically logout and again the login

and click the reset the password and download the csv