Task 1: Explore the Users and Groups

In this task you will explore the Users and Groups that have already been created for you in IAM.

  1. In the AWS Management Console, on the Search for services input box look for IAM.
  2. In the navigation pane on the left, click Users.
  3. Click on your username.

This will bring to a summary page for user. The Permissions tab will be displayed.

  1. Review your permissions.
  2. Click the Groups tab.
  1. Click on the name of the attached IAM policy (it should open in the new browser tab).
  2. In the Permissions tab clik on {}JSON button.
  3. As you can see, you have a full permission to all resources.
  4. Got back the the browser tab with your IAM user.
  5. Click the Security credentials tab.
Info
You will find that Console Access in enabled.
  1. Do you have Access key: (Yes/No)
  2. In the navigation pane on the left, click User groups.
Info
There is a group already created for you: S3-LogAudit.
  1. Click the S3-LogAudit group. This will bring you to the summary page for the S3-LogAudit group.
  2. Click the Permissions tab.
Info
This group has a Managed Policy associated with it, called AmazonS3ReadOnlyAccess. Managed Policies are pre-built policies (built either by AWS or by your administrators) that can be attached to IAM Users and Groups. When the policy is updated, the changes to the policy are immediately apply against all Users and Groups that are attached to the policy.
  1. Click the + button on left of AmazonS3ReadOnlyAccess name.
Info
A policy defines what actions are allowed or denied for specific AWS resources. This policy is granting permission to List and Get object from S3. This ability to view resources, but not modify them, is ideal for assigning to an Audit role.
  1. In the navigation pane on the left, click Account settings.
  2. Review Password Policy

Question ??

Try find an answer for the following questions:

1. What is Minimum password lenght ?
2. Is it possible to reuse a password: (Yes/No)