AWS Elemental MediaConnect
User Guide

Step 2. Create IAM Users

When you first create an AWS account, you begin with a single sign-in identity that has complete access to all AWS services and resources in the account. This identity is called the AWS account root user and is accessed by signing in with the email address and password that you used to create the account. We strongly recommend that you do not use the root user for your everyday tasks, even the administrative ones. Instead, adhere to the best practice of using the root user only to create your first IAM user. Then securely lock away the root user credentials and use them to perform only a few account and service management tasks.

We recommend that you create IAM users as follows:

  1. Create an IAM Admin user. In this procedure, you use the AWS account root user to create your first IAM user. In the procedure, you add this IAM user to an Administrators group to ensure that you have access to all services and their resources in your account. The next time that you access your AWS account, you should sign in with the credentials for this IAM user.

  2. Create delegated users for AWS Elemental MediaConnect. These accounts will be used by people other than the administrator. In this procedure, you also create a policy that allows these users to perform actions within the AWS Elemental MediaConnect console.

For more information, see Getting Started with IAM.