This lesson's interactive features are locked, please to keep using them

IAM Users

Let's make a new user! Each user gets a username/password or API keys to access AWS.

Users are long-lived identities: they stick around until you delete them. Once you create a user and give them credentials, those credentials will work until they expire or you revoke them.

Managing more than a handful of users manually is painful. If your company already uses something like Azure's Active Directory or Google Workspace, you can use AWS Identity Center to integrate with those services and manage users more easily.

Assignment

HR just onboarded Vincent Vega to the PatientPing dev team! Definitely do not give him root access to the AWS account. Instead, start by giving him his own IAM user, with no console login or permissions yet. Standard corporate hygiene.

Create an IAM user named patientping-admin-vinny (no console access, no policies yet).

Cost check: Creating IAM users is free; costs arise from service usage (EC2, S3 etc.), not from IAM.

Navigate to "IAM" using the search bar at the top of the AWS Console.
Click "Users" in the left menu, then "Create user."
Set the user name to patientping-admin-vinny. Do not provide console access. Click "Next."
On the "Set permissions" step, don't do anything; just click "Next" again.
Review the new user details, then click "Create user."
Back in the list of users, confirm that patientping-admin-vinny is now present.

Run and submit the CLI tests.

Tip

Want to use the CLI instead? Here's the command structure:

aws iam create-user --user-name patientping-admin-vinny