WHAT IS IAM

1. IAM is stands for (Identity and Access management)
2. Identity is authentication it means credintials like user id and password to login the AWS account but we don't have access to operate the services in aws account
3. Access is authorization it means permissions we can operate the specific services only in AWS acount
4. For IAM user having restrictions for using of AWS services

FEATURES OF IAM

1. You can share your AWS account to others without giving them your credentials
2. You can give permission for users but restrict them to read only access for ec2 service then the user can read only he can't able to write and change the ec2 service

IAM ARCHITECTURE

STEPS TO CREATE IDENTITY OR AUTHENTICATION IN IAM

1. Go to AWS console and sign-in as root user

2. Search IAM service in search bar and select the IAM

3. it will take you to IAM dash board

4. Click on user and create one user

5. Give the user name as shown in below figure

6. Select the provide user access to the AWS management console option as shown in below figure

   

7. Select i want to create an iam user option

   1. Select auto generated password option in console passord
   2. Select user must create a new password option it is optinal as shown in below figure

8. click on next option

9. Select the add user to group in permissions options as shown in below figure

   

10. Click on next and click on create user

11. You can see console sign-in details

    1. copy the console sign-in URL or click on download .csv file as shown in below figure

12. Paste the copied url on new web page

13. It will take you to sign-in console of IAM

    1. Enter the user name and copied password as shown in below figure

14. We enter into the AWS account with only authentication but we don't have any permissions to access services as shown in below figure

    

---

STEPS TO CREATE ACCESS OR AUTHORIZATION IN IAM

1. Go to AWS console and sign-in as root user

2. Search IAM service in search bar and select the IAM

3. it will take you to IAM dash board

4. Click on user and create one user

5. Give the user name as shown in below figure

6. Select the provide user access to the AWS management console option as shown in below figure

   

7. Select i want to create an iam user option

   1. Select auto generated password option in console passord
   2. Select user must create a new password option it is optinal as shown in below figure
      

8. click on next option

9. Select attach policies directly option in permissions options as shown in below figure

   1. I select ec2full access it means giving permissions to ec2 services only

      

10. Click on next and click on create user

11. You can see console sign-in details

    1. copy the console sign-in URL or click on download .csv file as shown in below figure

       

12. Paste the copied url on new web page

13. It will take you to sign-in console of IAM

    1. Enter the user name and copied password as shown in below figure

14. We enter into AWS account with authentication and authorization it means i allowed the permissions for only ec2 services and other services like s3,IAM is not worked

15. Worked status of ec2 is shown in below figure

---

WHAT IS USER GROUP IN IAM

1. User groups in IAM are used to manage permissions for multiple users frequently. instead of assigining permissions to each user individually, you can create a group, assing permissions to that group, and then add users to that group.

STEPS TO CREATE USER GROUPS IN IAM

STEP 1:

1. Go to IAM console
2. Select the user groups option and click on create user group
   1. Give the name for user group as shown in below figure
   2. No need to add user it is optional as shown in below figure
   3. Attach the policies for the groups i choose s3full sevice as shown in below figure
   4. Click on create user group then user group is created

STEP 2:

1. Go to users option and click on create user
   1. Give the name tag
   2. Select the provide user access to the aws management console option
   3. select the i want to create IAM user option
   4. select auto generated password in console password option
   5. select these all options as shown in below figure
2. Select the created group in user
3. Then the user is attached to the created group as shown in below figure
4. Click on next and click on create user then it is created

STEP 3:

1. Go to user groups
2. Observe the created group there you see two users are attached as shown in below figure