3. Craeting IAM User-Groups in AWS

𝐋𝐢𝐧𝐤 𝐭𝐨 𝐋𝐢𝐯𝐞 𝐃𝐞𝐦𝐨

https://www.linkedin.com/posts/chukwuemekapetereze_130daysinthecloud-cloudengineer-devopsengineer-activity-7349854007261081600-TsT7?utm_source=share&utm_medium=member_desktop&rcm=ACoAAE07mDcByhc1RoMiNRuL0ByrNU6QNgQPqeU

In AWS Console, Inside the search Dialgue box, Type in IAM and Select IAM (Manage access to AWS resources) from the search result.

Select User Group by the left side of the screen under dashboard
Select Create User Group
- Under group name, Name the group For ****Example: DevOps Team
  
  Nb: You can directly add users to a group and also attach permissions to a user, However, skip this step for now.
- Select Create Group
  
  Nb: Repeat Step 2 Above to create
  - Developers-Team
  - Admin-Team, and as many other User-groups that is needed.
  Nb: One individual can be in as many Teams depending on his role.

To Add Users into a Group.

Select a User-group Name
Scroll down and select add users
Select a Users name and click add user.

To Assign Permission to a Group.

Go to User Group

Select a User-group
Go to Permissions
Select Add Permissions
Select Attach Policies
- For Admin-group
  - Select Administration Access.
- For Other Groups, Select the matching group Permission/Access
Select Attach policies.

Nb: AWS Best practice is to Assign permissions at the group/role level, not to individual users.This adheres to the Principle of Least Privilege, Easier Management and Scalability, Security, Compliance and Auditing.