Chapter 10 - 03 - Discuss the Insights of Cloud Security and Best Practices - 04_ocred_fax_ocred.pdf

Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computi...

Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing AWS IAM: Create Individual IAM Users 1 2 3 e — | S — -s DA At A N DD Do not allow a user to use the Provide a unique set of security This will help in changing or root user account; instead, credentials and appropriate revoking the permissions of create individual user accounts permissions to the IAM users IAM users as required for accessing AWS services - =] X § 1AM Managemers Conscle x ES € > C @ consoleaws.amazoncom/am/homelregon=us-east-2/users aQ o« 6 : & \ : Services v Resource Groups v % 0 S 3 Management (IAM) ‘ QUrind users by usemame o access hey sh Dasnboard » ASSese messgament v Username v Groups Accans bay age Passmord age Last sctimey ' f——— v @ Training_Grouwn More Tosay tiane ] — o ey Copyright © by EC iL All Rights Reserved. Reproduction is Strictly Prohibited AWS IAM: Create Individual IAM Users It is recommended to avoid using the AWS root user account to access AWS. Instead, individual user accounts should be created for accessing AWS. Accordingly, a user should create an IAM user for themselves and enable it with administrative permissions; this account should be used for all operations. Each IAM user should be provided with a unique set of security credentials and different permissions. The IAM user permissions should be changed or revoked if required. Steps to create a new IAM user: = Select Users from the Identity and Access Management (IAM) section and click Add user to create a new user. | % |AM Management Console x + - - A (S (& 8 console.aws.amazon.com/iam/home?region=us-east-2#/users Q e aws Services v ResourceGroups v % Q v Global ¥ Support v Identity and Access - o 6le Management (IAM) 1 Q Find users by usemame or access key Dashboard + Access management Username « Groups Access key age Password age Last Groups There are Learn more Roles Policies Figure 10.42: Add a User Module 10 Page 1352 Certified Cybersecurity Technician Copyright © by EG-Council All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing = InInthe the User name field, provide any name (here, Alice). = For Access type, provide AWS Management Console access to Alice under the Select AWS access type section. Select the Custom password radio button and enter a password in the Password field. The Require password reset tab is optional; however, enable this setting. Then, click on Next Permission. '¥ 1AM Management Console IAM X -+ -