AWS Access control create group policy

After the installation and configuration of AWS CLI, confirm it is working well.

These are the actions that we’ll perform in this guide.

*Create an IAM Group

*Attach Policy to the group

*Create an AWS IAM User

*Set initial password for the user and force password change on the first login

*Add User to IAM Group

*Give a user an additional IAM policy that grants access to services

An IAM group is a collection of IAM users. Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users.

create a group called DB-Admins:

You can confirm creation by listing available groups:

#aws iam list-groups

Step2: Attach Policy to the group

You can choose to create a new IAM policy that grants or deny access to services or use a pre-defined policy that works for your needs. You can easily get the ARN of a policy by clicking on the policy name and viewing the Summary. Copy the ARN and use it to attach the policy to the IAM user group.

Confirm the changes by listing all the policies attached to the IAM group

Step3: Create an AWS IAM User

Now that we have an IAM group with an attached policy, we can create an IAM user.

Step4: Add User to IAM Group

Add the user to the group for it to inherit permissions added to the group.

Step5: Add additional IAM policy to the user

If you want a user to have specific access to resources, you can attach a policy directly to the user. The policy can be pre-defined or the one you’re creating.