AWS Identity and Access Management (IAM) is a service provided by AWS to control access to AWS resources and services. With IAM, you can specify which users can access the services and resources. You can also specify the conditions under which the users can do so.
In this Cloud Lab, you’ll learn how to create an IAM user, add it to a user group, and specify policies for the given user group. Moreover, you’ll learn how to create an S3 bucket, upload files, and make them publicly accessible using resource-based policies. Lastly, you’ll also learn how to write a Lambda function and attach a role to it, enabling it to access S3 bucket objects.
By the end of this Cloud Lab, you’ll be well-equipped to create and manage users, user groups, roles, and policies in AWS using the IAM service. You’ll also be well-equipped to write resource-based policies to control access to S3 bucket objects. Moreover, you’ll understand how to use the IAM role to enable the Lambda function to access S3 bucket objects.
The following is a high-level architecture diagram of our tasks in this Cloud Lab:
