IAM User Permissions

AndrewBecker
3 min readJan 19, 2022

--

From the AWS Management Console go to IAM Dashboard, Next we will go to Policies on the left hand side

Once on the policies page, click Create Policy

For this tutorial we will use the visual editor

The first policy we will create will be for DynamoDB

We are going to allow all actions for DynamoDB and all resources

Once the DynamoDB permissions are set click the Add additional permissions at the bottom of the screen

Now we will set up Lambda

For Lambda we will use the same permissions, all actions and all resources

The next service we will set up is S3

The same permissions apply to S3 as well, all actions and all resources

The last service to set permission for is API Gateway

Again following the same rules

Now that we have all our services we can move to Tags

For this demonstration we will be skipping tags and going straight to review

Give your policy a name and review what you have created then select Create policy

Next we will need to create a group for our developers

Make your way to User groups on the left hand side

Once you are on the page select create group

Give your group a name and select the users you wish to have in the group

Scroll down and you will see Attach permissions policies, choose the policy you have just created.

Once you’re happy with the permissions you have set select Create Group

And our group is created, Developers added to the group will now have the access they need

--

--