Step 2: Create an IAM administrator user and group - Amazon Lookout for Vision

Step 2: Create an IAM administrator user and group

When you create an AWS account, you get a single sign-in identity that has access to all of the AWS services and resources in the account. This identity is called the AWS account root user. If you use the AWS root user account to sign in to the AWS Management Console , you have complete access to all of the AWS resources in your account.

We strongly recommend that you do not use the root user for everyday tasks, even the administrative ones. Instead, we recommend that you adhere to the best practice in Create Individual IAM Users, which is to create an AWS Identity and Access Management (IAM) administrator user. Then securely lock away the root user credentials, and use them to perform only a few account and service management tasks.

For more information, see How Amazon Lookout for Vision works with IAM.

To create an administrator user and sign in to the console

  1. Create an administrator user in your AWS account. For instructions, see Creating Your First IAM User and Administrators Group in the IAM User Guide.

    Note

    An IAM user with administrator permissions has unrestricted access to the AWS services in your account. You can restrict permissions as necessary. For more information, see Step 3: Set up permissions.

  2. Sign in to the AWS Management Console.

    To sign in to the AWS Management Console as a IAM user, you must use a special URL. For more information, see How Users Sign In to Your Account in the IAM User Guide.