Volume 3: IAM1/5
  1. 01Lessons 1-10
  2. 02Lessons 11-20
  3. 03Lessons 21-30
  4. 04Lessons 31-40
  5. 05Lessons 41-45

Chapter 01 of 05

Lessons 1-10

10 lessons20 min readingParts 81-90
  1. 01Read your AWS caller identity deeplyInterpret the account, user ID, and ARN returned by STS get-caller-identity.2 min read
  2. 02List IAM users in an AWS accountList IAM user names, ARNs, paths, and creation dates with a compact CLI query.2 min read
  3. 03Inspect one IAM userRetrieve one IAM user's ARN, path, stable ID, creation date, and password-use timestamp.2 min read
  4. 04Create an IAM user without credentialsCreate a bare IAM user from the CLI without a console password or access key.2 min read
  5. 05Tag an IAM userAdd ownership and environment tags to an existing IAM user.2 min read
  6. 06Query IAM user tagsFilter IAM user tags and return one tag value with JMESPath.2 min read
  7. 07Create an IAM user groupCreate an IAM group that can later receive shared permission policies.2 min read
  8. 08Add an IAM user to a groupAdd one IAM user to a group and verify the membership from both directions.2 min read
  9. 09List every group for an IAM userInspect all IAM group memberships for one user.2 min read
  10. 10Remove an IAM user from a group safelyRemove group membership, verify both resources, and delete an empty demo group.2 min read