Create Users

Overview

When one signs up for AWS, one becomes a "root user". This user can do anything. Obviously it's better to give specific permissions to other users. However, you also always need two people who can do everything.

To start with, we'll have the following:

• admin group, which can do everything, including create and delete new users
• two users, "larry.reid" and "phil.carrillo", who are in the admin group
• create a deploy group to deploy

Docs are here: https://aws.amazon.com/documentation/iam/

Install Amazon CLI

http://docs.aws.amazon.com/cli/latest/userguide/installing.html

Create Root User aka Sign Up for AWS as WEIT

Create Admin Group

1. Create group
2. Add policy to group

http://docs.aws.amazon.com/IAM/latest/UserGuide/getting-started_create-admin-group.html#w1ab1b9c19c13

Create User(s)

1. Create user(s)
2. Give user access to console
3. Add user(s) to group(s)
4. Allow user to manage their own security (step 6)

http://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html#id_users_create_cliwpsapi

Create Deploy Group

1. Create group
2. Add policy to group -- what is this going to be?

Accessing Console

User users an particular URL to log in. Log in is via two-factor authentication.

As Built

Pretty much just followed the prompts. Sending the e-mail message to Phil was weird. It looked like the text wasn't in the message in Thunderbird, but it was. Time waster.

Still need to force MFA. Docs said it was going to be there, but I didn't see it.