WEBVTT

00:00.000 --> 00:02.120
Cloud Console Basics.

00:02.120 --> 00:04.240
In this video, we will understand,

00:04.240 --> 00:08.560
sign in to the AWS console with root credentials.

00:08.560 --> 00:12.240
Understand the role of IAM in Access Control.

00:12.240 --> 00:15.920
Create and configure an IAM user with admin access.

00:20.720 --> 00:26.240
Sign in to AWS console for access services of AWS.

00:26.240 --> 00:28.120
After account creation,

00:28.120 --> 00:31.000
go to the AWS management console.

00:31.000 --> 00:34.040
Log in with your root user credentials.

00:38.680 --> 00:41.080
Here we can see console home dashboard.

00:41.080 --> 00:44.360
Let's explore identity and access management.

00:44.360 --> 00:46.760
IAM service.

00:46.760 --> 00:49.080
The main reason for the IAM service

00:49.080 --> 00:51.400
is to ensuring that only authorized user

00:51.400 --> 00:53.560
can access cloud infrastructure

00:53.560 --> 00:55.880
while allowing you to define and manage permissions

00:55.880 --> 00:58.920
to protect sensitive data.

00:58.920 --> 01:02.280
Let's search for IAM service in the search bar.

01:02.280 --> 01:05.800
You will be redirected to the IAM dashboard.

01:05.800 --> 01:11.320
From there, create a new IAM user with administrative privileges.

01:11.320 --> 01:14.680
To create a new user, follow three steps.

01:14.680 --> 01:17.000
Specify user details.

01:17.000 --> 01:19.240
We create specific username and password

01:19.240 --> 01:21.400
for user to access specific services.

01:26.120 --> 01:29.480
Set permissions.

01:29.480 --> 01:31.960
Allow the user access only to Lambda services.

01:36.760 --> 01:38.120
Review and create the user.

01:39.560 --> 01:42.120
And last step is review user name and password.

01:44.680 --> 01:46.760
Let's log in as the console user

01:46.760 --> 01:49.000
and check if the access we provided to the user

01:49.000 --> 01:50.200
gives the same permissions.

01:50.200 --> 01:58.680
In the console user's account, EC2 services shows access denied.

02:03.640 --> 02:06.120
S3 services show access denied.

02:07.400 --> 02:10.840
And RDS services also shows access denied.

02:12.760 --> 02:16.200
However, the user has access to Lambda services,

02:16.200 --> 02:19.080
which accepts permissions to create applications

02:19.160 --> 02:21.240
and configurations.

02:23.960 --> 02:27.240
This means the user has one permission

02:27.240 --> 02:30.200
that was granted to the administrator.