Skip to main content
In this lesson, you’ll learn how to set up IAM users and grant them access to AWS services. An IAM user can interact with AWS through the Management Console, AWS CLI, or SDKs, based on the permissions you attach.

​
Why IAM User Permissions Matter

By default, a newly created IAM user has no permissions. You must attach policies to grant access.

​
AWS Services and CLI Examples

​
Methods to Attach IAM Policies

You can grant AWS permissions by attaching policies to:
  • IAM Users: Directly attach policies to the user.
  • IAM Groups: Assign users to groups; they inherit group policies.
  • IAM Roles: Allow users or services to assume roles with temporary credentials.

​
Creating an IAM User

​
1. Using the AWS Management Console

  1. Sign in to the AWS Management Console.
  2. Navigate to IAM > Users > Add users.
  3. Enter a User name and select the access type:
    • Programmatic access (for AWS CLI/SDK).
    • AWS Management Console access (for web console).
  4. Click Next: Permissions and choose how to assign permissions:
    • Add user to group
    • Attach existing policies directly
    • Copy permissions from existing user
  5. Review and create the user. Download or copy the Access Key ID and Secret Access Key.

​
2. Using the AWS CLI

Create an IAM user:
Generate access keys for programmatic access:
Attach a policy (e.g., AmazonS3ReadOnlyAccess):
Store your Access Key ID and Secret Access Key securely. Treat them like password credentials.

​
Next Steps

After creating IAM users and attaching policies, consider:
  • Enforcing Multi-Factor Authentication (MFA) for console users.
  • Rotating access keys regularly.
  • Applying the principle of least privilege.

Watch Video