Amazon EC2 Cookbook

Chapter 4. Securing Access to Amazon EC2 Instances

In this chapter, we will cover recipes for:

• Creating IAM users
• Creating IAM groups and assigning group-level permissions
• Creating IAM roles
• Connecting on-premise AD to AWS IAM
• Configuring AWS multifactor authentication

Introduction

AWS Identity and Access Management (IAM) enables centralized control to secure access to AWS services and resources for your users. Using IAM, you can create and manage AWS users and groups, and use fine-grained permissions to allow and deny their access to AWS resources.

In this chapter, we present recipes for using AWS IAM to create users and roles, and assign appropriate permissions to securely access AWS services. Users can also be added to a group using the IAM groups ...