IAM Roles are used by services, systems, applications and accounts.

𝐋𝐢𝐧𝐤 𝐭𝐨 𝐋𝐢𝐯𝐞 𝐃𝐞𝐦𝐨

https://www.linkedin.com/posts/chukwuemekapetereze_130daysinthecloud-cloudengineer-devopsengineer-activity-7349854007261081600-TsT7?utm_source=share&utm_medium=member_desktop&rcm=ACoAAE07mDcByhc1RoMiNRuL0ByrNU6QNgQPqeU

Steps

Go to Roles Under IAM Dashboard

1. Select Create Role

   

   Select Trusted Entity (Below is an Explanation of eah of the service)

   • AWS Service - These are servicies within AWS that you want to give Access to eg: EC2, Lambda
   • AWS Account - This allows external users to have access and perform certain functions in your account. Eg: A Consultant
   • Web Identity - This is giving an application access to your AWS Account
   • SAML
   • Custom Trust policy

2. Select AWS Service

3. In the dialogue box below, Select the dropdown

   • Eg: Select Ec2 (Use case - EC2 Allows EC2 instances to call AWS services on your behalf.)

     

   • Click Next

4. Add Permission

   • (Skip for now) Click Next

5. Role Details

   • Role Name: Example… EC2-Role-01 or EC2-Role-CloudWatch or EC2-Role-S3Bucket

   • Description: Allow EC2 Instances to call AWS Services on my behalf (You can include the name of the service)… Eg: S3Bucket

     

   • Select Create Role

Adding Permissions To a Role

Go to Roles under IAM Dashboard

1. Select the Role name

   

2. Go to Permissions

3. Select Add Permission

   Select Attach Policies

   

   Search Eg: (S3 or Cloudwatch)

   Select… (Amazon S3 Full Access) or (Cloud Watch Full Access)

4. Select Add Permission

   Nb:

   • You can Attach Role to Example: Virtual Machine.
   • The Virtual Machine (VM) will use the role to perform the action meant for it.