Creating An IAM (Identity and Access Management) User in AWS and Generating An Access
Creating An IAM (Identity and Access Management) User in AWS and Generating An Access
Creating an IAM (Identity and Access Management) user in AWS and generating an Access
Key and Secret Key involves several steps. Follow these steps carefully:
Step 1: Sign in to AWS Management Console
1. Go to AWS Management Console.
2. Log in using your AWS root account or an existing IAM user with admin privileges.
Step 2: Open IAM Service
1. In the AWS Management Console, search for IAM in the search bar.
2. Click on IAM (Identity & Access Management) to open the IAM dashboard.
Step 3: Create a New IAM User
1. In the IAM Dashboard, navigate to Users (left sidebar).
2. Click the "Add users" button.
3. Enter a Username (e.g., devops-user).
4. Choose "Access key - Programmatic access" under Select AWS credential type.
• This is required if the user will be accessing AWS via CLI, SDK, or API.
5. Click "Next: Permissions".
Step 4: Assign Permissions
You have three options to grant permissions:
1. Attach an existing policy – Choose from predefined AWS policies.
• Example: Select AdministratorAccess if you want full access, or choose
AmazonS3FullAccess, AmazonEC2FullAccess, etc.
2. Add to a group – If you already have an IAM group with the required permissions, add
the user to that group.
3. Attach custom policies – If needed, create a custom policy and attach it.
After selecting the permissions, click "Next: Tags".
Step 5: (Optional) Add Tags
• Add tags (key-value pairs) for tracking purposes.
• Example:
• Key: Department, Value: DevOps
• Key: Project, Value: CloudMigration
Click "Next: Review".
Step 6: Review and Create the User
1. Review all configurations.
2. Click "Create user".
Step 7: Get Access Key and Secret Key
1. After creating the user, you will see a Success page with:
• Access Key ID
• Secret Access Key
2. Download the .csv file (contains the credentials).
3. Save the Secret Key securely because AWS does not show it again.
Important:
• Do not share the Access Key and Secret Key publicly.
• Use AWS IAM best practices by enabling MFA (Multi-Factor Authentication) for extra
security.
Step 8: Verify the Credentials (Optional)
To test if the credentials work, configure the AWS CLI:
1. Install AWS CLI if not installed.
aws configure
3. Verify access:
aws s3 ls