AWS Identity and Access Management
Using IAM (API Version 2010-05-08)
Search:
Entire Site
AMIs
Articles & Tutorials
AWS Product Information
Case Studies
Customer Apps
Developer Tools
Documentation
Public Data Sets
Release Notes
Solution Providers
Sample Code & Libraries
What Is IAM?
IAM Concepts
Accessing IAM
About IAM Entities
Identifiers
Limitations on IAM Entities
Getting Set Up
Getting Started
Creating an Admins Group Using the Console
Creating an Admins Group Using the CLI or API
Get IAM Users Started in Your AWS Account
Where to Go Next
Best Practices and Use Cases
Best Practices
Business Use Cases
Users and Groups
Adding a New User to Your AWS Account
Listing Users
Deleting a User from Your AWS Account
Creating and Listing Groups
Adding Users to and Removing Users from a Group
Deleting a Group
Renaming Users and Groups
Managing Passwords
Changing Your AWS Account Password
Managing an IAM Password Policy
Managing a Password Policy (AWS Management Console)
Granting IAM Users Permission to Manage Password Policy and Credentials
Displaying, Creating, Changing, or Deleting a Password Policy (API and CLI)
Creating, Changing, or Deleting a Password for an IAM User
Creating, Changing, or Deleting an IAM User Password (AWS Management Console)
Creating, Changing, or Deleting an IAM User Password (API and CLI)
Granting IAM Users Permission to Change Their Own Password
How IAM Users Change Their Own Password
Using Multi-Factor Authentication (MFA) Devices with AWS
Setting Up an MFA Device
Checking MFA Status
Using a Virtual MFA Device with AWS
Configuring and Enabling a Virtual MFA Device for a User
Configuring and Enabling a Virtual MFA Device for Your AWS Account
Using the IAM CLI or API with Virtual MFA Devices
Installing the AWS Virtual MFA Mobile Application
Enabling a Hardware MFA Device for Use with AWS
Synchronizing an MFA Device
Deactivating an MFA Device
Configuring MFA-Protected API Access
What If an MFA Device Is Lost or Stops Working?
Managing User Keys and Certificates
Creating, Modifying, and Viewing User Security Credentials
Creating and Uploading a User Signing Certificate
Adding a Credentials Management Policy for Users
Rotating Credentials
Permissions and Policies
Overview of Permissions
Overview of Policies
Managing IAM Policies
Example IAM Policies
Policy Reference
Elements
Policy Variables
IAM Policy Evaluation Logic
Roles
Granting Applications that Run on Amazon EC2 Instances Access to AWS Resources
Instance Profiles
Enabling Cross-Account API Access
Enabling Cross-Account API Access Walkthrough
Creating a Role
Modifying Group Permissions
Assuming a Role
Delegating API Access to Third Parties
Cross-Account Access Using Resource-Based Policies
Delegating API Access Within an AWS Account
Creating a Role
Modifying a Role
Assuming a Role
Deleting Roles or Instance Profiles
IAM and the AWS Management Console
The AWS Management Console Sign-in Page
Controlling User Access to the AWS Management Console
Using an Alias for Your AWS Account ID
MFA Devices and Your IAM-Enabled Sign-in Page
Managing Server Certificates
Actions on Server Certificates
Renaming Server Certificates
Creating, Uploading, and Deleting Server Certificates
AWS Services that Support IAM
Troubleshooting
Making Query Requests
Document History
AWS Documentation
»
AWS Identity and Access Management
»
Using IAM
»
Users and Groups
« Previous
Next »
Did this page help you?
Yes
|
No
|
Tell us about it...
Users and Groups
Topics
Adding a New User to Your AWS Account
Listing Users
Deleting a User from Your AWS Account
Creating and Listing Groups
Adding Users to and Removing Users from a Group
Deleting a Group
Renaming Users and Groups
Managing Passwords
Using Multi-Factor Authentication (MFA) Devices with AWS
Managing User Keys and Certificates
This section describes how to create and manage users and groups.
Javascript is disabled or is unavailable in your browser.
To use the AWS Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.