Skip to content

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.
  • Labs icon Lab
  • A Cloud Guru
Google Cloud Platform icon
Labs

Creating Users and Groups with Custom Policies in IAM

We have three new hires for our latest project, and we need to make sure they have the permission to access specific services. We also want to ensure that any future hires can be easily added to the same permissions. In order to do this, we will dive into the IAM, or Identity and Access Management service. We will create a custom policy for several users and a group to put them in.

Google Cloud Platform icon
Labs

Path Info

Level
Clock icon Beginner
Duration
Clock icon 30m
Published
Clock icon May 03, 2022

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.

Table of Contents

  1. Challenge

    Create a Custom Policy

    • Navigate to the IAM service in the AWS console.
    • Select Policies and click Create Policy.
    • Click on Choose a service and type in API to select API Gateway.
    • Select all permissions for the API Gateway and select all resources.
    • Click on Add another service and choose a service. Type in EC2 and select EC2 from the list.
    • Select List permissions for EC2 and select all resources.
    • Click on Add another service and choose a service. Type in S3 and select S3 from the list.
    • Select List permissions for S3 and select all resources.
    • Complete the creation of the policy by naming it CustomPolicy.
  2. Challenge

    Create Users and Group

    • Click on Users.
    • Create three users: Lisa, Xavier, and Edmond.
    • Specify a password for the users.
    • Create a group named Project1 and specify the CustomPolicy that was created in the last step to be used.
    • Complete creating the users.
  3. Challenge

    Test Permissions of the Users

    • Sign out of the AWS console.
    • Copy and paste the link for the AWS environment provided to you in this lab.
    • Use the Lisa user and the password you specified for that user.
    • Once signed in, navigate to the API Gateway to view permissions.
    • Navigate to the EC2 service and click on the running instance.
    • View actions available for that instance.
    • Navigate to the S3 service and test out various options to test permissions.

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Did you know?

On average, you retain 75% more of your learning if you get time for practice.

Start learning by doing today

View Plans