Creating IAM Groups

When working on IAM for the first time, in my opinion, it is best that you start off at creating your initial IAM Groups before creating user accounts.  This will give you an overview of how you would allocate permissions depending on the job function of users you will be creating next.

IAM Groups are similar to Microsoft AD Groups in such a way that it has attached permissions that provide any user added to the group access to perform certain functions on a given resource or resources.  However IAM Groups can only be used to manage permissions for AWS resources.

This article shows you how to create IAM Groups.

Steps to follow:

1. Login to the AWS console using your Root account. Click Services and then Click "IAM"
   
2. On the left hand side click "Groups"
   
3. Click the "Create New Group" button
   
4. Type the name of the group you wish to create then click the "Next Step" button.
   
5. Choose the level of permission from the list of Policies available then click the "Next Step"
   button. (For this example I chose AdministratorAccess which is similar to the Root account's)
   
6. Review the settings and then click the "Create Group" button.
   
    
7. Your new group is now created and is ready for users to be added to it. 

See the next article for creating IAM Users.