Practitioner Level

1 Hands-on lab

AWS IAM (Identity and Access Management) - Deep Dive

By Craig Arcuri

An in-depth experience with AWS's Identity and Access Management (IAM) service.

See Pricing

9 hours

45 Lessons
1 Hands-On Lab
8 Course Quizzes

About the course

This course will give the student an in-depth experience with Identity and Access Management (IAM). The course will start off covering basic concepts, such as root-account management, and continue to build on this initial foundation. Student can use their own AWS account to follow along with the lessons in configuring a small (fictitious) company with IAM. At the end of the course, students have extensive experience in configuring a company (of any size) in Identity and Access Managment.
Before beginning any of the lessons for this course, make sure to download the appropriate policy for the corresponding lesson in the "Downloads" section of the course.

Contact Sales See Pricing

Chapter 1 5 Lessons Getting Started 12:58

An Important Note About A Cloud Guru and Linux Academy Courses
1:19

Course Introduction
2:32

About the Training Architect
1:14

Introduction to IAM Secure Corporation
3:57

AWS Free Tier: Usage Tracking and Billing Widget
3:56
Chapter 2 5 Lessons Account Setup With Root Account 1:09:27

Manage Your Root User
11:05

Creating an Admin Group and User
15:12

Create Admin Users and Groups from the CLI
18:57

Tasks That Require Root User
9:13

QUIZ: IAM Account Setup with Root Account
15:00 Quiz
Chapter 3 6 Lessons Setup of Company Accounts 1:03:02

Creation of Employee Accounts
11:26

Access Key Management for All Users
12:55

Creating IAM Groups for Your Teams
11:45

Add Users to Groups
7:09

Configuring MFA For Users
4:47

QUIZ: IAM Setup of Company Accounts
15:00 Quiz
Chapter 4 2 Lessons BONUS Material: Introduction to a Cloud Assessment Learning Activity 46:39

Cloud Assessments Learning Activity: Identity and Access Management (IAM)
1:39

Introduction to AWS Identity and Access Management (IAM)
45:00 Hands-On Lab
Chapter 5 7 Lessons Identity Based IAM Policies 1:20:32

Policy Overview For IAM Secure Corporation
10:08

Implementing IAM Policies For All Users
9:18

Implementing IAM Policies For Specific Users/Groups
13:49

Enable Users to Configure Their Own Credentials and MFA
14:31

Using Managed Access Policies to Create a Limited Administrator
8:28

Granting Limited Permissions With Inline Policies
9:18

QUIZ: IAM Identity Based Policies
15:00 Quiz
Chapter 6 8 Lessons Using Policies To Access Resources 1:40:13

Overview of Using Policies to Control S3 Bucket Access
8:46

Configuration of IAMSecure Corp S3 Bucket Folder Structure
9:58

Attaching Policies to Groups For S3 Bucket Access
14:40

Using Policies to Grant Users Specific S3 Bucket Permissions
11:48

Accessing S3 Buckets From Outside the Account
8:12

Creating Policies With The Visual Editor
16:49

QUIZ: IAM Using Policies to control S3 Bucket access
15:00 Quiz

QUIZ: IAM Resource Policies and the Visual Editor
15:00 Quiz
Chapter 7 6 Lessons Understanding and Applying IAM Roles 1:00:17

Strategies for IAM Roles
9:55

Resource Level Permission for EC2 Instances via Roles
8:48

Cross-Account Access
9:30

Web Identity Federation
10:00

Providing Access to AWS Accounts Owned by Third Parties
7:04

QUIZ: IAM Roles
15:00 Quiz
Chapter 8 7 Lessons IAM Advanced Concepts 1:15:54

The Confused Deputy Problem
8:22

Sharing CloudTrail Log Files Between AWS Accounts
6:18

EC2 Instance Profiles
12:04

Delegate Access to the Billing Console
7:19

Calling AssumeRole From Python
10:57

Creating IAM Users and Groups with CloudFormation
15:54

QUIZ: IAM Advanced Concepts
15:00 Quiz
Chapter 9 6 Lessons Best Practices and Troubleshooting 1:17:59

Best Practices
12:48

General Troubleshooting of IAM
8:41

Troubleshooting Policies
8:58

Troubleshooting Policies 2 (with Intro to AWS Auto Scaling)
16:44

Troubleshooting IAM Roles and EC2
15:48

QUIZ: IAM Troubleshooting and Best Practices
15:00 Quiz
Chapter 10 1 Lesson Final Steps 1:40

What's Next?
1:40

What are Hands-on Labs

What's the difference between theoretical knowledge and real skills? Practical real-world experience. That's where Hands-on Labs come in! Hands-on Labs are guided, interactive experiences that help you learn and practice real-world scenarios in real cloud environments. Hands-on Labs are seamlessly integrated in courses, so you can learn by doing.

AWS IAM (Identity and Access Management) - Deep Dive

About the course

Lab Highlights

An Important Note About A Cloud Guru and Linux Academy Courses

Course Introduction

About the Training Architect

Introduction to IAM Secure Corporation

AWS Free Tier: Usage Tracking and Billing Widget

Manage Your Root User

Creating an Admin Group and User

Create Admin Users and Groups from the CLI

Tasks That Require Root User

QUIZ: IAM Account Setup with Root Account

Creation of Employee Accounts

Access Key Management for All Users

Creating IAM Groups for Your Teams

Add Users to Groups

Configuring MFA For Users

QUIZ: IAM Setup of Company Accounts

Cloud Assessments Learning Activity: Identity and Access Management (IAM)

Introduction to AWS Identity and Access Management (IAM)

Policy Overview For IAM Secure Corporation

Implementing IAM Policies For All Users

Implementing IAM Policies For Specific Users/Groups

Enable Users to Configure Their Own Credentials and MFA

Using Managed Access Policies to Create a Limited Administrator

Granting Limited Permissions With Inline Policies

QUIZ: IAM Identity Based Policies

Overview of Using Policies to Control S3 Bucket Access

Configuration of IAMSecure Corp S3 Bucket Folder Structure

Attaching Policies to Groups For S3 Bucket Access

Using Policies to Grant Users Specific S3 Bucket Permissions

Accessing S3 Buckets From Outside the Account

Creating Policies With The Visual Editor

QUIZ: IAM Using Policies to control S3 Bucket access

QUIZ: IAM Resource Policies and the Visual Editor

Strategies for IAM Roles

Resource Level Permission for EC2 Instances via Roles

Cross-Account Access

Web Identity Federation

Providing Access to AWS Accounts Owned by Third Parties

QUIZ: IAM Roles

The Confused Deputy Problem

Sharing CloudTrail Log Files Between AWS Accounts

EC2 Instance Profiles

Delegate Access to the Billing Console

Calling AssumeRole From Python

Creating IAM Users and Groups with CloudFormation

QUIZ: IAM Advanced Concepts

Best Practices

General Troubleshooting of IAM

Troubleshooting Policies

Troubleshooting Policies 2 (with Intro to AWS Auto Scaling)

Troubleshooting IAM Roles and EC2

QUIZ: IAM Troubleshooting and Best Practices

What's Next?

What are Hands-on Labs

Newsletter