(Archived) How can I use IAM (AWS Identity and Access Management) users

You have tried to access an archived page. Please go to the new

Knowledge Base to find more documents.

1 General information
2 Use
3 Login
4 Regions and services
5 Credentials: Access Key ID and Access Key
6 Permission scheme example
- 6.1 Media-sync (write/read to the defined bucket)

General information

AWS Identity and Access Management (IAM) is an Amazon AWS service to administer personalized or application-specific users within an AWS account. Using these users it is possible to assign detailed access rights within an account. In addition, roles can be used to control access from other accounts (cross account access).

Use

You will only receive an IAM user if you need one. Baseline access to AWS services is handled by Instance Profiles which are automatically attached to the individual instances.

Login in the AWS Console via https://<account-number>.signin.aws.amazon.com/console/ -> My Account -> My AWS Console (opens on mouseover).

Account number, user name and an initial password are provided by root360 for this purpose.

On the first login you need to change your password.

Regions and services

After the first login you may have to set the current region to the one where your services are located to gain access to your services.

This is done via the region button (second button from the right in the upper navigation bar in the AWS Console).

Credentials: Access Key ID and Access Key

AWS credentials (access key ID and access key) allow programmatic access to the AWS API (eg via SDK or AWS CLI Tools). If you need this, please tell us so and we will create these credentials for you.

Permission scheme example

Media-sync (write/read to the defined bucket)

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:ListAllMyBuckets",
      "Resource": "arn:aws:s3:::*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetBucketLocation"
      ],
      "Resource": "arn:aws:s3:::BUCKETNAME"
    },
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Resource": "arn:aws:s3:::BUCKETNAME/*"
    }
  ]
}