Creating an IAM User and User Group in AWS Management Console

The guide includes detailed instructions and screenshots for learners to follow along and set up IAM user and group access in AWS

26 steps
|
3 minutes

Amazon Web Services

Search for **AWS Management Console Login** in any browser Click on the first link with the domain address - [aws.amazon.com/console](//aws.amazon.com/console)

On the landing page click on "**Sign in to the Console**" on the top of the page

On the Sign-in page select the Root user radio button and enter the Root user email address. Click **Next** button

Enter the Root user password and click on **Sign in** button

Once you're signed in to the console, Type **IAM** in the search bar and click on **IAM** to view the IAM Dashboard

On the IAM dashboard click on the **User groups** from the left bar to view User groups

On the **IAM Users group** page click on the **Create group** button to create a new IAM group

Create user group wizard will open, Type the group name as "**Developers**"

Scroll down to the **Attach Permissions Policies** section Select the "**AdministratorAccess**" policy to give Administrator permissions to the IAM users that will be assigned to the "**Developers**" group

Scroll the page and click on **Create group** button

The "**Developers**" IAM User group will be created successfully

On the same page select **Users** from the left bar to create new or view existing IAM users

On this page click on **Create user** button to create a new IAM user

Create user wizard will open, Type the user name as "**in28minutes_dev**"

Select "**Provide user access to the AWS Management Console**" check box

Scroll down to the tip section and select the "**I want to create an IAM user**" radio button

Select the console password option. You can either choose : **Autogenerated password** - Password generated by AWS as per the default password policy **Custom password** - Password entered by the user resonating with the default password policy

Select Custom Password radio button and enter the password of your choice

Select the "**Users must create a new password at next sign-in recommended**" checkbox

Enabling "**Users must create a new password at next Sign-in**" allows IAM users to create a new password at the next Sign-in for improved security

Click **Next** button to assign permission/s to the IAM user

Set the permission by selecting the "**Add user to group**" radio button in the Permission options section

Adding users to a group in AWS helps streamline access management by allowing you to assign permissions to multiple users at once. This simplifies administration, ensuring efficient control and security over resources while reducing the risk of unauthorized access.

Scroll to the **Users groups** section and select the "**Developers**" group to add the IAM user to the group

Scroll to the end of the page and click on the **Create user** button to create the IAM user

The "**in28minutes_dev**" IAM User will be created successfully Copy the console sign-in URL to log into the AWS Console as an IAM User ***Note***:*Remember to save the IAM Username and Console Password in a safe place*

Log out of the AWS root account and close the browser. Open the browser again and paste the copied console sign-in URL in the address bar - The root account ID will be pre-populated in the Account ID field - Enter "**in28minutes_dev**" as the IAM user name - Enter the IAM user password - Click on **Sign in** button

You will be successfully signed in to the **AWS Console** as an **IAM User (in28minutes_dev)**

Congratulations on completing this lab and Creating an IAM User and User Group in AWS Management Console! Good job!