Demo IAM Groups

In this tutorial, you'll learn how to create IAM groups in the AWS Management Console, attach policies, and add existing users. We’ll set up two groups:

• HR: Grants access to a specific S3 bucket.
• IT: Provides full administrative privileges.

Prerequisites

• An AWS account with sufficient privileges to manage IAM resources.
• Existing IAM users (e.g., John, Sarah).

Step 1: Open the IAM Console

1. Sign in to the AWS Management Console.
2. Navigate to Services > Security, Identity, & Compliance > IAM.
3. In the left pane, select User groups.

You should see a list of your current IAM user groups (if any).

Step 2: Create the “HR” Group

1. Click Create group.

2. Enter HR as the Group name.

3. Under Add users to group, select John.

4. In Attach managed policies, click Create policy, then paste the JSON below:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Sid": "HRPolicy",
         "Effect": "Allow",
         "Action": "s3:*",
         "Resource": [
           "arn:aws:s3:::company1-hr-bucket",
           "arn:aws:s3:::company1-hr-bucket/*"
         ]
       }
     ]
   }
   

5. Review the policy, give it a name like HRPolicy, and attach it to the group.

6. Click Create group to finalize.

Step 3: Create the “IT” Group

1. Click Create group again.
2. Enter IT as the Group name.
3. Select Sarah under Add users to group.
4. In Attach managed policies, search for and select AdministratorAccess.
5. Click Create group.

The IT group will now have full AWS administrative access.

Summary of IAM Groups

Links and References

• AWS IAM User Groups
• AWS S3 Bucket Permissions
• AWS AdministratorAccess Managed Policy