IAM Lab

Intro: You are working as a developer for Cloud Solutions inc. They recently acquired a new contract for Midwest Bank to set up their cloud infrastructure. Being a financial institution, security and access to their internal system is their main concern always. You have been tasked with the job to create their internal access roles for their in-house development team.

Task: You are to use your knowledge of IAM to create their access roles for each employee / groups of the company. Create the following:

Region: US-West-2

Groups:

1. DevOps Rules:
   • AmazonVPCFullAccess
   • CloudFrontFullAccess
   • AWSElasticBeanstalkFullAccess
   • AmazonRoute53FullAccess
2. FrontEnd Rules:
   • AmazonS3FullAccess
   • AmazonSNSFullAccess
   • AmazonSQSReadOnlyAccess
3. BackEnd Rules:
   • AmazonDynamoDBFullAccess
   • AmazonAPIGatewayAdminstrator
   • AmazonEC2FullAccess
4. Security Rules:
   • IAMUserSSHKeys
   • CloudWatchFullAccess
   • AmazonVPCFullAccess
5. CTO Rules: AdministratorAccess Users:
6. John

• Programmatic access, console access
• Auto Generated password
• Require password reset
• Group = DevOps

2. Samantha

• Programmatic access
• Auto Generated password
• Require password reset
• Group = DevOps

3. Gabriel

• Programmatic access, console access
• Auto Generated password
• Require password reset
• Group = Backend

4. Steven

• Programmatic access
• Auto Generated password
• Require password reset
• Group = Backend

5. Susan

• Programmatic access, console access
• Auto Generated password
• Require password reset
• Group = FrontEnd

6. Blake

• Programmatic access
• Auto Generated password
• Require password reset
• Group = FrontEnd

7. Thad

• Programmatic access, console access
• Auto Generated password
• Require password reset
• Group = Security

8. Hilary

• Programmatic access
• Auto Generated password
• Require password reset
• Group = Security

9. Bob

• Programmatic access, console access
• Auto Generated password
• Require password reset
• Group = CTO