From the course: Complete Guide to AWS Security and Compliance Management

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Configuring IAM roles

Configuring IAM roles

- [Instructor] With a solid understanding of what IAM rules are, let's get into the web console and set up a new role to allow EC2 instances to interact with S3. Here I am at the IAM Dashboard. To get started, I go ahead and click on the Roles link in the left hand nav under Access Management. This brings me to the roles configuration screen. To get started, I click the Create Role button, which takes me through the Create Role Wizard. Here I can specify the type of entity I want to trust. For instance, I can trust a native AWS service, like EC2 or Lambda. I have the option of trusting another AWS account. This is useful when operating in a multi-account environment. You also have the option of trusting a web identity, using Open ID or AWS'S Cognito service. You also have the option of federating access using SAML, which stands for Security Assertion Markup Language. Finally, you can author a custom policy if you know how to write the JSON directly. In this case, I want to trust an…

Contents