Demo Create IAM User

In this tutorial, you’ll learn how to create a new IAM user in AWS, verify console access, and configure AWS CLI credentials using AWS CloudShell. We’ll use john as our example user.

1. Access the IAM Console

1. Sign in to the AWS Management Console.
2. In the search bar, type IAM and select Identity and Access Management.
3. On the IAM dashboard, review any security recommendations (e.g., enabling MFA).

4. In the left navigation pane, click Users to view existing IAM users.

2. Create a New IAM User

1. Click Add users.
2. Enter john as the User name.
3. Under Select AWS access type, choose one or both of the following:

4. For Console password, select Custom password and enter your desired password.

5. Enable Require password reset to force john to set a new password at first sign-in.

6. On the Set permissions page, assign policies or skip this step to configure permissions later.
7. Click Next until you reach the Review page, verify all settings, then click Create user.
8. Choose Return to users.

3. Test the Console Sign-In

1. Open a private/incognito browser window.
2. Navigate to https://aws.amazon.com and click Sign In.
3. Select IAM user, enter your AWS account ID, then click Next.
4. Provide Username: john and the initial password you set.

5. You’ll be prompted to change the password:

6. Enter the old password, choose a new one, and confirm.

After confirmation, you will be signed in as john.

4. Configure AWS CLI for the New User

Next, we’ll set up AWS CLI credentials in CloudShell for the john profile.

1. From the AWS Console, open CloudShell.
2. Verify your current identity (should show your admin user, e.g., kodekloud):

aws sts get-caller-identity

{
  "UserId": "AIDAZFD2ZUTSVCJWCHYKF",
  "Account": "629470240221",
  "Arn": "arn:aws:iam::629470240221:user/kodekloud"
}

3. Create access keys for john:
   • In IAM Console, go to Users > john.
   • Select the Security credentials tab.
   • Under Access keys, click Create access key.
   • For Use case, pick Command line interface and proceed.
   • Copy the Access key ID and Secret access key.

4. Back in CloudShell, configure a dedicated profile:

aws configure --profile john

When prompted, enter:

• AWS Access Key ID: <paste access key ID>
• AWS Secret Access Key: <paste secret key>
• Default region name: us-west-2 (or your preferred region)
• Default output format: (leave blank or choose json)

5. Validate the john profile:

aws sts get-caller-identity --profile john

{
  "UserId": "AIDAZFD2ZUTS3DCUVP",
  "Account": "629470240221",
  "Arn": "arn:aws:iam::629470240221:user/john"
}

You have now successfully created an IAM user, tested console sign-in, and configured AWS CLI access for john.

Links and References

• AWS IAM Documentation
• Managing Access Keys for IAM Users
• AWS CLI User Guide