Getting started with Amazon Location Service - Amazon Location Service

Getting started with Amazon Location Service

Before you can access Amazon Location, start by making sure that you have the following prerequisite tasks completed:

Sign up for AWS

If you're new to Amazon Web Services AWS, sign up for an AWS account.

To create an AWS account

  1. Open https://portal.aws.amazon.com/billing/signup.

  2. Choose Create an AWS Account.

  3. Follow the instructions.

    Note

    You'll need your 12-digit AWS account ID to verify your AWS account through a phone call and by entering a PIN using your phone keypad. For more information about Finding your AWS account ID, see The AWS General Reference Guide.

Manage access to your AWS resources using IAM

AWS Identity and Access Management (IAM) is a web service that enables you to manage access to your AWS resources by controlling who is authenticated and authorized to use resources.

When you sign up for an AWS account, you start with a root account.

There are two different types of users in AWS:

  • Root user — The administrative account used by the account owner to allow full access to all resources in the account.

  • IAM user — An account created by the root user, which is granted targeted access to resources using attached permissions specified by an IAM policy.

Because you cannot use IAM policies to explicitly deny the root user access to resources, it's a best practice to avoid using your AWS root user account for everyday tasks where it’s not required. Instead, we recommend that you set up and use an IAM user account with targeted access and permissions to perform specific tasks and access resources. This enables you to lock away the access keys for the root user. For more information about tasks that require a root user, see the IAM User Guide.

When you create a new IAM user, you’ll be able to view and download your user credentials, which are your account ID, account key ID, and secret key. You will need these later to set up authentication to access AWS resources.

Important

This is the only time that you can view and download your secret access key. You can select the Download .csv option to keep record of your Access key ID and Secret access key. If you lose your credentials, you can create new credentials.

To create an IAM user account

Console

Creating an IAM User and Administrator Group using the IAM Console

You can create an IAM user and group using the AWS Management Console. For information about Creating an IAM Admin User and Group (Console) , see the IAM User Guide.

If you're new to AWS, see Getting Started with a Service in the AWS Management Console Getting Started guide.

CLI

Creating an IAM User and Administrator Group using AWS CLI

Alternatively, you can create an IAM user and group using AWS CLI. For information about Creating an IAM Admin User and Group (AWS CLI), see the IAM User Guide.

If you're new to AWS Command Line Interface (AWS CLI), see Getting Set Up with the AWS Command Line Interface in the AWS Command Line Interface User Guide.

Grant access to Amazon Location Service

Your new IAM user account has no permissions by default. Before you can access Amazon Location, you must grant permission by attaching an IAM policy with specific permissions. Make sure to follow the Principle of least privilege when granting access to resources.

To grant access to Amazon Location, you must create an IAM policy to assign to IAM users.

To create a policy to grant permission to an IAM user

  1. Open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane, choose Policies, then Create policy.

  3. Open the JSON tab to enter the following:

    In this example policy, the new user is given permission to access Amazon Location operations.

    { "Version": "2012-10-17", "Statement": [ { "Action": [ "geo:*" ], "Resource": "*", "Effect": "Allow" } ] }

    For more examples, see Amazon Location Service identity-based policy examples.

  4. Choose Review policy.

  5. For Name, enter a unique name for this policy. For example, AmazonLocationAccessPolicy .

  6. Choose Create policy.

For more information about request property descriptions, see the IAM JSON Policy Elements Reference in the AWS Identity and Access Management User Guide.

Next steps

Now that your account is set up:

Optionally: