Set up AWS IAM, Identity Center, Organization

Tasks:

  1. Set up an AWS Organization for a company managing three AWS accounts. ============================================================== a) Make 1 account managment accout (root account) b) others should be Dev, Staging, Production. c) If in any reason you encountered issues trying to add more account, Troubleshoot and provide reason why it failed to add more accounts. (But dont sleep there) move to next task. Note: Take Screen shot for Documentation purpose.
  2. Use AWS Identity Center(IAM) to create 5 users, group them based on roles ============================================================== Admin-Team <== One Users in DevOps Team <== Two Users in Developer Team <== Two Users in Note: Take Screen shot for Documentation purpose.
  3. Use permission-Set to create Three permission ============================================================== a) Admin-permission b) PowerUser-permission c) SystemAdmin permission d) DataScientist Permission Note: Take Screen shot for Documentation purpose.
  4. Assign appropriate permissions to each group using Permission-set policies. ============================================================== a) Admin-Team = Admin-permission b) DevOps-Team = PowerUser-permission & SystemAdmin-permission c) Developer = DataScientist-Permission Note: Take Screen shot for Documentation purpose.
  5. Multi-Factor Authentication. ============================================================== Make sure Each user uses MFA to Login to thier Account. Note: Take Screen short for Documentation purpose.
  6. Account Allocation ============================================================== All users should have access to All Account but only permission should determin what they can do in the respective accounts.

Note: Take Screen shot for Documentation purpose.

  1. Finally ==============================================================
  2. Login to Each user account, capturing the first authencitation (password) and second which is MFA token for all users.
  3. Show how you switch to another account from that Single Sign On Page (SSO) Note: Take Screen short for Documentation purpose.

8)Documentation/Screen short.

Make sure you documents all the process from stage one to final stage. You have only two days to pass your assignment.

Each Team lead of every Pod should publish Notion.com publication page. and share it to Chinny for Marking and grading of your team/Pod.

Good luck.