Basic configuration (AWS)
Simple steps to enable your AWS cloud environmentSimple steps to enable your AWS cloud environment
AWS
In Amazon Web Services (AWS), an IAM User is used by applications, scripts, or services to access AWS resources. This document will run through creating an IAM User with access keys. The access keys are used for programmatic access to AWS services.
IAM Users provide a secure and manageable way for your applications to access AWS resources. Instead of using your root AWS account, you can create a specific identity for your application, reducing security risks and improving accountability.
As the creator of the IAM User, you and your organization retain full control over access to your environment; if access needs to be removed, you have the ability to remove access by the IAM User.
Sign in to the AWS Management Console
Sign in to the AWS Management Console using your AWS account and locate the Identity and Access Management (IAM) service where identity and authentication are managed in AWS.
Create a new IAM User
In the IAM dashboard, select "Users" from the left-hand menu and click the "Add user" button. Enter the following details:
- User name: how it will be identified in AWS. Feel free to choose something meaningful for this purpose that conforms with others.
- Access type: Select "Programmatic access" to generate access keys for your IAM User.
Once ready, click "Next: Permissions" to proceed.
Attach policies
On the permissions page, select the policies that define what actions the IAM User can perform. At a minimum, you might want to attach the "AmazonEC2ReadOnlyAccess" policy to view EC2 resources.
Once policies are attached, click "Next: Tags" to proceed.
Add tags (optional)
You can add tags to your IAM User for easier identification. Once tags are added, click "Next: Review" to proceed.
Review and create
Review the details of the IAM User you are creating and click "Create user" to finish. Take note of the Access key ID and Secret access key displayed; you will need these later.
Grant IAM User permissions
To allow your IAM User to see cost details of your resources, you will need to grant it the appropriate level of access.
Sign in to the AWS Management Console
Sign in to the AWS Management Console using your AWS account and locate the AWS Identity and Access Management (IAM) service where permissions are managed in AWS.
Add IAM policy
In the IAM dashboard, select "Policies" from the left-hand menu and click the "Create policy" button. Enter the following details:
- Service: Select "All services" to include all AWS services.
- Actions: Search for and include actions that allow viewing cost details.
- Resources: Specify the resources to which this policy applies.