Securing AWS Resources: Managing Access with IAM

Securing AWS Resources: Managing Access with IAM
Securing AWS Resources: Managing Access with IAM

CLOUD LABS

Securing AWS Resources: Managing Access with IAM

In this Cloud Lab, we’ll thoroughly explore AWS IAM and learn how to use this service to manage access to AWS resources. We’ll learn about identity and resource-based policies (attached to an S3 bucket). Lastly, we’ll learn about IAM roles using the Lambda function to access S3 bucket objects.

9 Tasks

beginner

1hr 30m

Certificate of Completion

Desktop OnlyDevice is not compatible.
No Setup Required
Amazon Web Services

Learning Objectives

An understanding of AWS IAM and its application to secure AWS resources
Working knowledge of IAM users and user groups
The ability to write identity-based and resource-based policies
The ability to write resource-based policies to control access to S3 bucket objects
An understanding of how to use the IAM role to enable the Lambda function to access S3 bucket objects

Technologies
AWS logoAWS
IAM logoIAM
S3 logoS3
Lambda logoLambda
Skills Covered
Using AWS Cloud Services
Cloud Lab Overview

AWS Identity and Access Management (IAM) is a service provided by AWS to control access to AWS resources and services. With IAM, you can specify which users can access the services and resources. You can also specify the conditions under which the users can do so.

In this Cloud Lab, you’ll learn how to create an IAM user, add it to a user group, and specify policies for the given user group. Moreover, you’ll learn how to create an S3 bucket, upload files, and make them publicly accessible using resource-based policies. Lastly, you’ll also learn how to write a Lambda function and attach a role to it, enabling it to access S3 bucket objects.

By the end of this Cloud Lab, you’ll be well-equipped to create and manage users, user groups, roles, and policies in AWS using the IAM service. You’ll also be well-equipped to write resource-based policies to control access to S3 bucket objects. Moreover, you’ll understand how to use the IAM role to enable the Lambda function to access S3 bucket objects.

The following is a high-level architecture diagram of our tasks in this Cloud Lab:

Architecture Diagram
Architecture Diagram
Cloud Lab Tasks
1.Introduction
Getting Started
2.Identity-Based Policies
IAM Identity-Based Policy
Create an IAM Group and Add a User
3.Resource-Based Policies
Create an S3 Bucket and Upload Files
Add a Resource-Based Policy
4.IAM Roles
Create an IAM Role
Create a Lambda Function
5.Conclusion
Clean Up
Wrap Up
Labs Rules Apply
Stay within resource usage requirements.
Do not engage in cryptocurrency mining.
Do not engage in or encourage activity that is illegal.

Relevant Courses

Use the following content to review prerequisites or explore specific concepts in detail.

Trusted by 1.4 million developers working at companies including

Don’t take our word for it. See what our developers have to say.

Your method is simple, straight to the point and I can practice with it everywhere, even from my phone, that's something I have never had in other learning platforms.

Felipe Matheus
TestimonialsImg

I highly recommend Educative. The courses are well organized and easy to understand.

Adina Ong
TestimonialsImg

I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.

Clifford Fajardo
TestimonialsImg

I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.

Clifford Fajardo
TestimonialsImg
Don’t take our word for it. See what our developers have to say.

Your method is simple, straight to the point and I can practice with it everywhere, even from my phone, that's something I have never had in other learning platforms.

Felipe Matheus
TestimonialsImg

I highly recommend Educative. The courses are well organized and easy to understand.

Adina Ong
TestimonialsImg

I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.

Clifford Fajardo
TestimonialsImg

Get access to Educative Cloud Labs

Course Footer Image
Course Footer Image