Creating IAM Policies for EC2, S3 and DynamoDB

Lab Details:

1. This lab walks you through the steps to Create IAM Policies
   
2. Duration: 30 minutes
   
3. AWS Region: US East (N. Virginia)
   

Tasks:

1. Login to AWS Management Console.
   
2. Create IAM Policy for EC2.
   
3. Create IAM Policy for S3.
   
4. Create IAM Policy for DynamoDB.
   

Architecture Diagram:

Steps:

Creating Policy for EC2

1. Navigate to the  menu at the top, then click on IAM in the  section.
   
2. In the left menu, select Policies.
   
3. Click on .
   
4. Under Visual Editor, select choose a service. 
   
5. Type EC2 in the search box and select EC2.
   

1. In the Actions, specify the actions allowed in EC2. For this service, We’ll choose List and Read.
   

1. Click on Resources and choose All resources so that there is no need to specify the resource ARN.
   

1. If you click on the JSON, you can see the policy we created.
   

• Click on .
  
• Review:
  
  • Name : EC2Policy
    
  • For Policy description, type a description for the new policy.
    
  • In the Summary, you can see the Access level.
    
  • Review the policy and then choose Create Policy.
    

1. After creating you will get a verification for the created Policy.
   

1. In the filter policies, type your policy name and click on it.
   

1. In the Summary, (under the JSON) you can see the policy you created. 
   

Creating Policy for S3

1. In the left menu, select Policies.
   
2. Click on .
   
3. Under Visual Editor, select choose a service. 
   
4. Type S3 in the search box and select S3.
   
5. In the Actions, specify the actions allowed in S3. For this service, we’ll choose List, Tagging and Write.
   

1. Click on Resources and choose All resources so that there is no need to specify the resource ARN.
   

• If you click on the JSON, you can see the policy we created.
  
• Click on .
  
• Review:
  
  • Name : S3Policy
    
  • For Policy description, type a description for the new policy.
    
  • In the Summary, you can see the Access level.
    
  • Review the policy and then choose Create Policy.
    
• After creating you will get a verification for the created policy
  

1. In the filter policies, type your policy name and click on it.
   

1. In the Summary, (under the JSON) you can see the policy you created. 
   

Creating Policy for DynamoDB

1. In the left menu, select Policies.
   
2. Click on .
   
3. Under Visual Editor, select choose a service. 
   
4. Type DynamoDB in the search box and select DynamoDB.
   
5. In the Actions, specify the actions allowed in S3. For this service, we’ll choose List, Read, Tagging and Write.
   

1. Click on Resources and choose All resources so that there is no need to specify the resource  ARN.
   

• If you click on the JSON you can see the policy we created.
  
• Click on .
  
• Review:
  
  • Name   : DynamoDBPolicy
    
  •  For Policy description, type a description for the new policy.
    
  • In the Summary, you can see the Access level.
    
  • Review the policy and then choose Create Policy.
    
• After creating you will get a verification for the created policy
  

1. In the filter policies, type your policy name and click on it.
   
2. In the Summary, (under the JSON) you can see the policy you created. 
   

Completion and Conclusion

1. You have successfully created an IAM Policy for EC2 Service.
   
2. You have successfully created an IAM Policy for S3 Service.
   
3. You have successfully created an IAM Policy for DynamoDB service.