Quick links to common tasks

Use the following links to get help with common tasks associated with IAM.

Sign in as an IAM user

See How IAM users sign in to AWS.

Manage passwords for IAM users

You need a password in order to access the AWS Management Console, including access to billing information.

For your AWS account root user, see Changing the AWS account root user password.

For an IAM user, see Managing passwords for IAM users.

Manage permissions for IAM users

You use policies to grant permissions to the IAM users in your AWS account. IAM users have no permissions when they are created, so you must add permissions to allow them to use AWS resources.

For more information, see Managing IAM policies.

List the users in your AWS account and get information about their credentials

See Getting credential reports for your AWS account.

Add multi-factor authentication (MFA)

To add a virtual MFA device, see one of the following:

• Enable a virtual MFA device for your AWS account root user (console)

• Enable a virtual MFA device for an IAM user (console)

To add a U2F security key, see one of the following:

• Enable a U2F security key for the AWS account root user (console)

• Enable a U2F security key for another IAM user (console)

To add a hardware MFA device, see one of the following:

• Enable a hardware MFA device for the AWS account root user (console).

• Enable a hardware MFA device for another IAM user (console)

Get an access key

You need an access key if you want to make AWS requests using the AWS SDKs, the AWS Command Line Tools, or the API operations.

Important

You can view and download your secret access key only when you create the access key. You cannot view or recover a secret access key later. However, if you lose your secret access key, you can create a new access key.

For your AWS account, see Managing Access Keys for your AWS Account.

For an IAM user, see Managing access keys for IAM users.

Tag IAM resources

You can tag the following IAM resources:

• IAM users

• IAM roles

• Customer managed policies

• Identity providers

• Server certificates

• Virtual MFA devices

To learn about tags in IAM, see Tagging IAM resources.

To learn about using tags to control access to AWS resources, see Controlling access to AWS resources using tags.

View the actions, resources, and condition keys for all services

This set of reference documentation can help you write detailed IAM policies. Each AWS service defines the actions, resources, and condition context keys that you use in IAM policies. To learn more, see Actions, Resources, and Condition Keys for AWS Services.

Get started with all of AWS

This set of documentation deals primarily with the IAM service. To learn about getting started with AWS and using multiple services to solve a problem such as building and launching your first project, see the Getting Started Resource Center.