Lab 2 – Create Users & Groups and apply policies
Scenario : I have newly Started an IT Company called “SatyaCodes”, newly
recruited below Users
Users - [dev1, dev2, dev3], [dba1, dba2], [ops1, ops2]
Create All above users
Groups - [DEV_GROUP, DBA_GROUP, OPS_GROUP]
-
Each User should be part of their respective Groups
-
Each Group/User should have respective Policy
Policies | S3 | DynamoDB | VPC |
---|---|---|---|
DEV_Policy | Full | Read | NO |
DBA_Policy | READ | FULL | NO |
OPS_Policy | READ | READ | FULL |
Users Creation
Users - [dev1, dev2, dev3], [dba1, dba2], [ops1, ops2]
-
In the AWS Management Console, on the Services menu, click IAM.
-
on the left, click Users.
-
Add user – - [dev1, dev2, dev3], & it will gives access keys as well
-
Login with created users
- It will redirect to change password page
-
It will show the newly created User dashboard & if we try to access anything it will show error message , because you were not part of any Group/Policy
Groups Creation
Click On Groups from left > Add Group ([DEV_GROUP, DBA_GROUP, OPS_GROUP]) > Skip policy for Now
Select Each group & add Users to It
Now Click on Users Tab – Groups will be updated.
Policies
Policies nothing but permissions – what type of permissions user have for the particular service.
Each Group/User should have respective Policy
Policies | S3 | DynamoDB | VPC |
---|---|---|---|
DEV_Policy | Full | Read | NO |
DBA_Policy | READ | FULL | NO |
OPS_Policy | READ | READ | FULL |
By default all Users have IAMUserChangePassword policy, that’s why users are navigating to change password page after first login.