Create IAM Role

Create IAM Role

We will proceed to create an IAM role for the EC2 Administrator user along with the policies created in the previous section.

1. Log in to AWS Management Console and access IAM Management Console.

2. In the left navigation bar, select Role and click Create role button.

3. On the create new screen, we select Another AWS account and fill in our account ID (you can find Account ID in the My Account section). Select Next

In the Attach permissions policies area, we will select the following policies in order:

• ec2-list-read
• ec2-create-tags
• ec2-create-tags-existing
• ec2-run-instances
• ec2-manage-instances

4. Select Next.

5. Fill in the name ec2-admin-team-alpha with specific description.

6. Proceed to create by clicking Create role.

7. After successful creation, in the list of IAM roles, we select ec2-admin-team-alpha.

8. We proceed to configure Trust relationships.

9. Edit the trust policy and click Update policy

     arn:aws:iam:<Account ID>:user/AdminUser
   

10. Complete the update.