How to create IAM User in AWS step by step

In the previous post we’ve already seen What is IAM, IAM Components, IAM Role vs User. In this post we will be seeing how to create IAM User in AWS. We will be doing complete hand on lab where we will be creating IAM User step by step.

So let’s get started,

You can create one or more IAM users in your AWS account. You might create an IAM user when someone joins your team, or when you create a new application that needs to make API calls to AWS.

Step 1: Open AWS Console login and from services select IAM.

You should be able to see IAM Dashboard as shown below.

IAM Dashboard
IAM Dashboard

Step 2: We’ve already seen what is Users, Group, Roles and Policies in our previous post. So if you’re not aware of it, kindly go through my previous lectures.

Step 3: Tap on Users from the left pane and you should be able to see below screen.

Create User
Create User

Step 4: Tap on Add User and Fill out the details.

add user
add user

Access Type: There are two types of Access one is Programatic other is AWS Console. Based on the work which user will be doing you can give one or both.

Console Password: Password which user needs while logging.

Require Password Reset: This option will enable the user to change password once he logs in.

Step 5: Tap on next -> Permissions

adduser
adduser

Add user to group: Here you can add new user to existing group so that the policies attached to group will be given to user. Since there are no groups you don’t see any group listed here.

existinguser
existinguser

Copy Permission from Existing user: In this the new user which we created get permissions from existing user, So basically we’re attaching policies of existing user to new user. Since there are no user you don’t see any user listed here.

attach policies
attach policies

Attach Existing Policies: AWS has created some policies which we can attach to new user, we can create our own policies and attach to user.

So in this we are going to give AmzonEC2FullAccess to our user.

Amzonec2full
Amzonec2full

Step: 6: Tap next and add tags, such as name, project user role and etc.

Step 7: Tap on review and verify all the details as shown below.

review
review

Step 8: Tap on Create User. Do not forget to download the .csv file.

Step 9: Open .csv file

credentials
credentials

Step 9: In this you can see User name is Aditya_Malviya, password is not present because we’ve asked user to change the password once logged in. Access key id and secret access key for AWS CLI login and console link from where he can log in.

Step 10: Copy console login link and open in other browser.

sign in
sign in

You should see the sign in as IAM user enter credentials which was used for your account.

Step 11: Enter the new password and login.

Step 12: Now you can login to AWS Console, If you remember we gave only EC2FullAccess permission so check EC2 from services you will be having complete access over it. Now check RDS/S3 bucket or any other services you won’t be able to perform any actions.

So this was in depth tutorial on how to create user, Do shoot out in comment section if you have any queries.



Categories: AWS

Tags: , , , ,

1 reply

Trackbacks

  1. What are IAM Policies in AWS – THE NUCLEAR GEEKS

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: