Skip to content

IAM Policies Hands OnΒΆ

If we remove the previously made user from the admin group, we would see a following error when viting the IAM page.

iam-permission-needed

We are going to create a new group developers and attach the a random permission to it like AWSDirectConnectReadOnlyAccess, attach the user to it. We are going to re-attach the user to the admin group. We are going to add permission straight to the user:

iam-add-permission

iam-attach-policy

Now we can see that the user has 3 policies - one attached directly, one from admin group and one from the developers group.

iam-policies-inherited

If we go to the policy section, open one up and click on the JSON button, we can see that these policies are written in the format we previously looked at:

administrator-policy

iam-readonly-policy

You can also create your own policies which can be done either with a simple JSON or a visual editor.

create-policy-json

create-policy-visual-editor

policy-ve-filled

If we click back to the JSON, it will be populated:

filled-policy-json