In this video, learn how to create IAM roles and policies.
- [Instructor] If you noticed…when we created our user account,…we gave it full access permissions.…Unless you're the owner of your AWS account,…you'll rarely see this in the real world.…This means you need to be familiar…with the creation and management of IAM policies,…which can be used to provide a more restrictive…and Java specific set of permissions.…Let's look at a policy right now.…Here in AWS Console,…we'll click on Policies under IAM,…we'll type S3,…and this is the AWS S3 full access policy.…
It has three main elements,…effect, which can be allow or deny,…the action, in this case the S3 service,…and the resource,…in this case it could be a specific bucket within S3.…Let's click on Roles now.…We'll click on Create Role.…When defining a role,…you'll be asked to first create a trust policy.…Essentially, this is just asking who can assume this role…and the answer to that is users from other accounts,…federated users, web identity users,…and in our case AWS Services.…
Let's now associate the policy we just saw with this role.…
- Identity and Access Management security
- S3 security policies, encryption, and version control
- KMS encryption
- User authentication with Cognito
Skill Level Advanced
Developing AWS Lambda Functions with Kotlinwith Troy Miles1h 55m Intermediate
AWS Machine Learning by Examplewith Jonathan Fernandes1h 25m Intermediate
1. Identity and Access Management (IAM)
2. Amazon Simple Storage Service (S3)
3. Key Management Service (KMS) Encryption
4. User Identities with Cognito and Web
Next steps2m 9s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.