From the course: AWS Administration: Security Fundamentals

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Demo: Creating a role

Demo: Creating a role

- [Presenter] In this demo, we're going to take a look at adding an IAM role for the purpose of a web server needing access to an AWS service. We've opened the Identity and Access Management Dashboard, and under Access Management, let's select Roles. Top right hand corner, let's click Create role. We have a couple of options, entities that we can set up. We're going to select an AWS service, but there are other options. For example, AWS accounts, SAML 2.0 federation web identity or a custom trust policy. So we'll leave it at the default, AWS service, and the use case is going to be EC2. Now, they give us lots of options because there's lots of use cases. We'll just leave it as an EC2 instance and click next. Now I have to add the permission policy that I want the role to have. What we want this application that's hosted on a particular web server to have is read only access to Amazon S3. We'll select this managed…

Contents