Menu

Basic configuration (AWS)

Simple steps to enable your AWS cloud environment #setup #access #admin #AWS

Simple steps to enable your AWS cloud environment

AWS

In Amazon Web Services (AWS), an IAM User is used by applications, scripts, or services to access AWS resources. This document will run through creating an IAM User with access keys. The access keys are used for programmatic access to AWS services.

IAM Users provide a secure and manageable way for your applications to access AWS resources. Instead of using your root AWS account, you can create a specific identity for your application, reducing security risks and improving accountability.

As the creator of the IAM User, you and your organization retain full control over access to your environment; if access needs to be removed, you have the ability to remove access by the IAM User.

Sign in to the AWS Management Console

Sign in to the AWS Management Console using your AWS account and locate the Identity and Access Management (IAM) service where identity and authentication are managed in AWS.

Create a new IAM User

In the IAM dashboard, select "Users" from the left-hand menu and click the "Add user" button. Enter the following details:

  • User name: how it will be identified in AWS. Feel free to choose something meaningful for this purpose that conforms with others.
  • Access type: Select "Programmatic access" to generate access keys for your IAM User.

Once ready, click "Next: Permissions" to proceed.

Attach policies

On the permissions page, select the policies that define what actions the IAM User can perform. At a minimum, you might want to attach the "AmazonEC2ReadOnlyAccess" policy to view EC2 resources.

Once policies are attached, click "Next: Tags" to proceed.

Add tags (optional)

You can add tags to your IAM User for easier identification. Once tags are added, click "Next: Review" to proceed.

Review and create

Review the details of the IAM User you are creating and click "Create user" to finish. Take note of the Access key ID and Secret access key displayed; you will need these later.

Grant IAM User permissions

To allow your IAM User to see cost details of your resources, you will need to grant it the appropriate level of access.

Sign in to the AWS Management Console

Sign in to the AWS Management Console using your AWS account and locate the AWS Identity and Access Management (IAM) service where permissions are managed in AWS.

Add IAM policy

In the IAM dashboard, select "Policies" from the left-hand menu and click the "Create policy" button. Enter the following details:

  • Service: Select "All services" to include all AWS services.
  • Actions: Search for and include actions that allow viewing cost details.
  • Resources: Specify the resources to which this policy applies.

Once the policy is created, you can attach it to your IAM User.

Attach policy to IAM User

Go back to the IAM dashboard, select "Users" from the left-hand menu, and click on your IAM User. In the "Permissions" tab, click "Attach policies" and select the policy you created.

You have now configured your AWS environment to allow monitoring using cloudcondense.