EN
EspañolEnglishFrançaisDeutschPortuguêsItaliano
Sign in Start free

AWS permissions and security guides (IAM) in English, explained from scratch

IAM is where you decide who can do what in your AWS account. Here you learn to protect the account with two-factor authentication, give people and tools access with minimal permissions, use roles instead of keys and know who did each thing.

6 guides on IAM

Create an IAM user with minimal permissions from CloudShell

Create in AWS an access key that can only do the essentials (view, start and stop Lightsail machines, for example) to hand to a panel or an external t…

⏱ 15 minutes◎ Intermediate levelRead the guide →

Access for an external tool with an IAM role, no keys

Create in your AWS account a role that another account can assume, with minimal permissions and an external ID, so that an external panel or service w…

⏱ 15 minutes◎ Intermediate levelRead the guide →

Protect your AWS account: two-factor and no root user

The four measures that stop someone stealing your AWS account and leaving you a bill for thousands of euros: two-factor on the root account, stop usin…

⏱ 20 minutes◎ For everyoneRead the guide →

Know who did what in your AWS account

A stopped machine, a deleted file, a DNS change nobody owns up to. AWS records everything that happens in your account in CloudTrail; this guide expla…

⏱ 15 minutes◎ For everyoneRead the guide →

Give a colleague access without sharing your password

A colleague, an outside technician or your accountant needs to get into AWS. How to create their own user with only the permissions they need (view on…

⏱ 15 minutes◎ For everyoneRead the guide →

What permissions to give a new employee in AWS (and which not to)

How to give a new person access to AWS without turning them into an administrator: IAM groups by role (view, operate, administer), the AWS policies th…

⏱ 25 minutes◎ Basic levelRead the guide →

See all guides · Missing a IAM task? Tell us and we will write it.

All of this, without the AWS console

Simplio is a panel to manage your AWS accounts: machines, scheduled copies, databases, domains, email and what AWS charges you, with per-person permissions and two-factor. Nothing installed on your servers.

Start free for 15 days, no card

Already a customer? Customer access.