AWS IAM Roles Hands On

Back to: AWS Tutorials For Beginners and Professionals

AWS IAM Roles Hands On

In this article, I am going to discuss AWS IAM Roles Hands On. Please read our previous article where we discussed AWS IAM Roles for Services.

AWS IAM Roles Hands On

On the left-hand side of IAM, there are roles and you may see zero roles. Right now, I have six, it’s because I use a different kind of account. It does not matter for these hands-on, but we have roles and roles that allow entities in the AWS to get credentials for a short duration and to do whatever they need to do.

So, let us go ahead and create our first role and we will have the same thing. We are going to choose a trusted entity type. And as we can see, we have different types. We can create roles for either service if you will. There are also accounts with identities and SAML Federation custom trust policy.

All of these are out of the scope of the exam. The only thing we need to know even for the hands-on is just that we can create a role for AWS services and amongst them, the two most common use cases are to create a role for an EC2 instance or for Lambda function. But as you can see, you go here. There are lots of AWS services that can support having roles, okay? And the roles are everywhere in AWS. But to keep it simple right now we are going to create a role, an IAM role for the EC2 instances. So, let’s click on next.

Next, I am going to have to assign policies and permissions to that role. We will allow that role to do IAM read-only access. This is going to allow my EC2 instance to read from IAM. We click on next?

Then we have to define a role name. So, you choose whatever you want for the role name, for example, I will enter the demo role for EC2.

Then we verify that, yes, we did have the IAM read-only access and we created this role. So the role has now been created.

If I click on it, we can verify that the permissions are applied correctly, the IAM read-only access. And we are not going to use this role right now.

When we get to the EC2 section of this course we will be leveraging this role allowing the EC2 instance to perform actions against IAM and read data from IAM okay.

In the next article, I am going to discuss AWS IAM Security Tools Hands-On. Here, in this article, I try to explain AWS IAM Roles Hands-on and I hope you enjoy this AWS IAM Roles Hands-On article.