[AWS] Create New User and Generate Access Keys


Hi. In this post, I'll show you a walkthrough of how to create a new user in your AWS and also generate its access keys so that it can be used on CLI.


Steps:

  1. Open `https://aws.amazon.com/console/`. On the header, click on `Sign in to the Console` button.


  2. Under 'Sign In' page, click either 'Root user' or 'IAM user'. Enter your email and password and click 'Sign In'
  3. Under 'Console Home', click on 'IAM'. If you can't find it here, use the Search tool or press 'Alt+S' to enter your inputs.

  4. On the 'Identity and Access Management' page, on left-side pane, click and expand 'Access Management'. Under this, click on 'Users'.

  5. Under 'Users' page, click on 'Add Users' button.
  6. The 'Add Users' procedure consists of 3 steps, namely: Specify user details, Set permissions, and Review and Create.

  7. Under 'Specify user details', enter a meaningful user name. Click on 'Next' button.

  8. Under 'Set Permissions' step, select 'Add user to group'. Under 'User Groups', select 'Create group'.
  9. Under 'Create user group' pop up, enter a meaningful name to identify this group. Next, under 'Permission Policies' select a policy according to your project's need and then click on 'Create user group'. For now, let's select 'AdministratorAccess-Amplify' for an example.

  10. Under 'User Groups', select the user group you have just created and click 'Next'.

  11. Under 'Review and Create' page, review all the entered details and click 'Create user'. 

Until here you have seen how to create a new user. After this, you will see how to generate access key.

  1. Under the list of all users, click on the username you had just created.

  2. A 'Summary' page opens for that user. Here, you will see different tabs under the summary: Permissions, Groups, Tags, etc.

  3. Click on 'Security credentials' tab. Scroll down to 'Access keys' section and click on 'Create access key'. 

  4. Creation of access key consists of 3 steps, namely: Access key best practices and alternatives, Set description tag and Retrieve access keys. 
  5. Under 'Access key best practices and alternatives', select the use case which best fits your project needs and click on 'Next'.


  6. The 'Set description tag' is optional but you can use this step to describe the purpose of this access key. Next, click 'Create access'
  7. Under 'Retrieve access keys'. either you can copy access key and secret access key values or download a '.csv' file. and click 'Done'.


Here are some best practices to remember for Access keys:
  • Never store your access key in plain text, in a code repository, or in code.
  • Disable or delete access key when no longer needed.
  • Enable least-privilege permissions.
  • Rotate access keys regularly.

Comments

Popular

How To Create MySQL Table with SequelizeJS

How To Read CSV Files in Java as Maven Project

How To Create A Hibernate Project in Maven