Create IAM User

Create Admin Group

1. Log in to AWS Management Console and access IAM Management Console.

2. Search for and select IAM service

3. In the left sidebar, select User Groups then select Create Group

4. In the Name the group section, enter AdminGroup and scroll down

5. In the Attach permissions policies section, type AdministratorAccess in the search bar and press enter. From the list that appears, select AdministratorAccess. Finally, select Create Group.

6. Complete creating admin group.

Create Admin User

1. In the left sidebar, select Users then select Add User

2. On the Specify user details page, under User details section, in the User name box, enter a name for the new user. This is their AWS login name. For example: AdminUser

• Select Provide user access to the – AWS Management Console, this option creates AWS Management Console credentials for the new user.

• You are asked if you are providing console access for a person. We recommend you create users in IAM Identity Center instead of IAM.

• To switch to creating users in IAM Identity Center, select Specify a user in Identity Center.

• If you haven’t enabled IAM Identity Center, selecting this option will take you to the service page in the console so you can enable this service. For details on this process, see https://docs.aws.amazon.com/singlesignon/latest/userguide/getting-started.html in the AWS IAM Identity Center User Guide (successor to AWS Single Sign-On).

• If you have already enabled IAM Identity Center, selecting this option will take you to the “Specify user details” page in IAM Identity Center. For details on this process, see https://docs.aws.amazon.com/singlesignon/latest/userguide/addusers.html in the AWS IAM Identity Center User Guide (successor to AWS Single Sign-On).

• If you cannot use IAM Identity Center, select I want to create an IAM user.

3. For Console password, choose one of the following options:

• Autogenerated password - The user will receive a randomly generated password that meets the account password policy. You can view or download the password when you get to the Retrieve password page.

• Custom password - The user will be assigned the password you enter in the box.

• (Optional) Users must create a new password at next sign-in (recommended) is selected by default to ensure users are forced to change their password the first time they sign in.

• Select Next

4. On the Set permissions page, specify how you want to assign permissions to this user. Select one of the following three options:

• Select Add user to group - Select this option if you want to assign the user to one or more groups that already have permission policies. IAM displays a list of groups in your account, along with their attached policies. You can select one or more existing groups or select Create group to create a new group. For more information, see Guide to changing permissions for an IAM user.

• Copy permissions - Select this option to copy all group memberships, attached managed policies, embedded inline policies, and any existing permission boundaries from an existing user to the new user. IAM displays a list of users in your account. Select the user whose permissions best match your new user’s needs.

• Attach policies directly - Select this option to view a list of AWS managed policies and customer managed policies in your account. Select the policies you want to attach to the user or select Create policy to open a new browser tab and create a new policy. For more information, see step 4 in the Create IAM role. After creating the policy, close that tab and return to the original tab to add the policy to the user.

• In this lab, we will select Add user to group. Then select AdminGroup and click Next.

5. (Optional) On Review and create, under Tags section, select Add new tag to add data about the user by attaching tags as key-value pairs.

• Review all the choices you have made up to this point. When you are ready to proceed, select Create user.

6. On the Retrieve password page, retrieve the password assigned to the user:

• Select Show next to the password to view the user’s password, from which you can manually record the password.

• You can save the login information in Notepad or select Download.csv to download the user’s credentials as a .csv file that you can save to a secure location.

7. Verify User created successfully

8. Check user’s group