Introduction
IAM (Identity and Access Management) in AWS (Amazon Web Services) allows you to control access to your resources securely. To manage access permissions effectively, it's crucial to update IAM policies for users as your requirements evolve. This KB article outlines the steps to update IAM policies for users in AWS.
Prerequisites
- AWS account with appropriate permissions to manage IAM users and policies.
- Basic understanding of IAM concepts such as users, groups, roles, and policies.
Process
Step 1: Access IAM Dashboard.
Click on the "Services" dropdown menu and select "IAM" under the "Security, Identity & Compliance" section.
Step 3: Select Create Policy and add the JSON File.
Create custom policy in AWS IAM Step 4: Add the custom-made policy JSON file here.
In AWS a User or User Group can be assigned with AWS Managed Policy (Pre-Made Policies by AWS) or Custom Policy, if you want to know how to create custom AWS IAM Policies follow this KB Article.
Paste the custom policy JSON here.
Step 5: Assign Custom Policy to User
Select Users under Access Management sidebar menu, and select the user you want to update the policy with.
Select "Add Permissions" under Permissions Tab
Select Attach existing policies directly and search for the newly added custom policy in the search box, once selected click Next: Review button.
Review the policy and click
Add Permission to assign the policy to selected user.
Conclusion
Updating IAM policies for users in AWS is essential to ensure the right level of access control and security within your AWS environment. By following the steps outlined in this KB article, you can effectively manage and update IAM policies to align with your organization's evolving needs.
Remember to adhere to the principle of least privilege when assigning permissions to users, granting only the permissions necessary for their specific roles and responsibilities. Regularly review and audit IAM policies to maintain a robust security posture in AWS.