{"id":1401,"date":"2021-07-14T11:07:49","date_gmt":"2021-07-14T10:07:49","guid":{"rendered":"https:\/\/www.easydeploy.io\/blog\/?p=1401"},"modified":"2021-07-16T11:08:36","modified_gmt":"2021-07-16T10:08:36","slug":"aws-iam-roles-policies","status":"publish","type":"post","link":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/","title":{"rendered":"AWS IAM Roles and\u00a0Policies"},"content":{"rendered":"<p class=\"graf graf--p\">We have seen in detail what is AWS IAM and how to implement it in our previous blog. <a href=\"https:\/\/www.easydeploy.io\/blog\/what-is-aws-identity-and-access-management-iam\/\"><strong>https:\/\/www.easydeploy.io\/blog\/what-is-aws-identity-and-access-management-iam\/<\/strong><\/a><\/p>\n<p class=\"graf graf--p\">Now, in continuation of it let us discuss what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to your environment.<\/p>\n<h2 class=\"graf graf--h3\"><em>IAM Roles<\/em><\/h2>\n<p class=\"graf graf--p\">An <em>IAM role<\/em> is an IAM identity that you can create in your account that has specific permissions. These roles define the set of permissions for making AWS service request. IAM roles do not have long-term credentials stored in them instead when you assume a role it provides you with temporary security credentials for your role session.<\/p>\n<p class=\"graf graf--p\"><strong><em>IAM roles are normally attached to Users or Applications that do not have specific accounts yet they are in need of access to AWS services.<\/em><\/strong><\/p>\n<p class=\"graf graf--p\">Let us consider an example in which our EC2 machine wants full access to an S3 bucket in order to perform some operations related to files. Here, embedding a security key inside EC2 is not an ideal solution as anybody can crack the keys and gain access to our data on the S3 bucket. Instead, let us make use of attaching an IAM Role to our EC2 machine so it has access to the S3 bucket without hard coding any credentials.<\/p>\n<p class=\"graf graf--p\"><em>The first part is to create an IAM Role:<\/em><\/p>\n<ol class=\"postList\">\n<li class=\"graf graf--li\">Under IAM go to Create a role and select AWS service i.e EC2 in this case (you can attach a role to another account, web identity, or also to other corporate federations).<\/li>\n<\/ol>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*-h7cfGzIwxEyQNaM50cUww.jpeg\" data-image-id=\"1*-h7cfGzIwxEyQNaM50cUww.jpeg\" data-width=\"1506\" data-height=\"739\" \/><\/figure>\n<p class=\"graf graf--p\">2. Click on the Next: Permissions option after which you will be asked to select the permission policy (here we need S3 full access) and select AmazonS3FullAccess. Click on Next: Tags and give any naming tags if you wish to.<\/p>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*DOPJI83804gqQazBpbPQcA.jpeg\" data-image-id=\"1*DOPJI83804gqQazBpbPQcA.jpeg\" data-width=\"1538\" data-height=\"739\" \/><\/figure>\n<p class=\"graf graf--p\">3. Give the relevant Role name and click on Create role and now your role is ready to attach to an EC2 instance. You can find your Role under the Role name list once it is created.<\/p>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*Bu1jFQQ9dT6DDLBva8dtaQ.jpeg\" data-image-id=\"1*Bu1jFQQ9dT6DDLBva8dtaQ.jpeg\" data-width=\"1611\" data-height=\"730\" \/><\/figure>\n<p class=\"graf graf--p\"><strong><em>The second part is to attach the Role to the EC2 instance and verify:<\/em><\/strong><\/p>\n<ol class=\"postList\">\n<li class=\"graf graf--li\">An IAM Role can be attached to an instance at the time of launching it or even after launching it via Modify IAM Role under the EC2 Actions tab.<\/li>\n<\/ol>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*oX0tXRJgnwVUA8dM-EBaYw.jpeg\" data-image-id=\"1*oX0tXRJgnwVUA8dM-EBaYw.jpeg\" data-width=\"1678\" data-height=\"742\" \/><figcaption class=\"imageCaption\">(adding IAM Role in step3 while launching EC2 instance)<\/figcaption><\/figure>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*XhRgJ1VdZas9zjv7PzSbHA.jpeg\" data-image-id=\"1*XhRgJ1VdZas9zjv7PzSbHA.jpeg\" data-width=\"971\" data-height=\"464\" \/><\/figure>\n<p class=\"graf graf--p\">2. After attaching the required Role we can see in the below snip that the EC2 instance is able to make S3 calls without putting in any credentials.<\/p>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*yNJWFSwTKc5ZfCVmHzzTGw.jpeg\" data-image-id=\"1*yNJWFSwTKc5ZfCVmHzzTGw.jpeg\" data-width=\"1078\" data-height=\"575\" \/><\/figure>\n<p class=\"graf graf--p\">Like this, we can use IAM Roles to define a set of permissions for making AWS service request.<\/p>\n<h2 class=\"graf graf--h3\"><em>IAM Policies<\/em><\/h2>\n<p class=\"graf graf--p\">After going through IAM Roles you must have now got little idea of what actually IAM Policies are.<\/p>\n<p class=\"graf graf--p\"><strong><em>IAM policies define permissions for action regardless of the method that you use to perform the operation.<\/em><\/strong><\/p>\n<p class=\"graf graf--p\">Roles are set of permissions attached to IAM User or any AWS Service whereas Policies are the permission sets attached only to an IAM User.<\/p>\n<p class=\"graf graf--p\">By considering the above Role where we chose AWS S3 full access let&#8217;s look inside this policy and understand how it is defined.<\/p>\n<p class=\"graf graf--p\"><strong>IAM Policies are defined in JSON and consist of key items such as Effect, Action, and Resource.<\/strong> We can make use of prebuilt Policies or can define our own.<\/p>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*2hvIaBKlRIHTBztPM86IZg.jpeg\" data-image-id=\"1*2hvIaBKlRIHTBztPM86IZg.jpeg\" data-width=\"868\" data-height=\"611\" \/><\/figure>\n<p class=\"graf graf--p\">In the above policy, it has been given Allow effect to perform any kind of Action on the Resource S3 bucket.<\/p>\n<p class=\"graf graf--p\">Let us take one more example policy below where an IAM User has only EC2 full access within a specific region. This user would not be able to perform any actions apart from EC2.<\/p>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*U9cNz-u-MBavzoKE2iI5NA.png\" data-image-id=\"1*U9cNz-u-MBavzoKE2iI5NA.png\" data-width=\"803\" data-height=\"579\" \/><\/figure>\n<p class=\"graf graf--p\"><strong><em>IAM Policies can also be defined manually by using Policy Generator as per the below steps:<\/em><\/strong><\/p>\n<ol class=\"postList\">\n<li class=\"graf graf--li\">Under IAM go to Policies and select Create Policy.<\/li>\n<li class=\"graf graf--li\">Will create a policy that provides S3 read-only access. Under service choose S3 and Actions is Read.<\/li>\n<\/ol>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*8598gDN3fPOhIyB5FH_1hg.jpeg\" data-image-id=\"1*8598gDN3fPOhIyB5FH_1hg.jpeg\" data-width=\"1540\" data-height=\"731\" \/><\/figure>\n<p class=\"graf graf--p\">3. Under Resources choose specific points to which the access needs to be given. Once all required details are filled give a tag and create a Policy.<\/p>\n<figure class=\"graf graf--figure\"><img decoding=\"async\" class=\"graf-image\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1200\/1*XyPZbnpXu515nmdEbSbycg.jpeg\" data-image-id=\"1*XyPZbnpXu515nmdEbSbycg.jpeg\" data-width=\"1392\" data-height=\"379\" \/><\/figure>\n<h3 class=\"graf graf--p\"><em><strong class=\"markup--strong markup--p-strong\">AWS IAM Switch Role<\/strong><\/em><\/h3>\n<p class=\"graf graf--p\">A role specifies a set of permissions that you can use to access AWS resources that you need. In that sense, it is similar to a user in AWS Identity and Access Management (IAM).\u00a0\u2026 When you switch to a role, you temporarily give up your user permissions and work with the permissions that are assigned to the role.<\/p>\n<p class=\"graf graf--p\">Assume you are user A in an account XYZ having read-only access and now want to do some auditing in all other accounts and you need to switch to account B with read-only access. This can be achieved by performing Swith Role and in order to get this worked account id of A should be given permission in account B and account, A should be attached with STS (Security Token Service) permission.<\/p>\n<p class=\"graf graf--p\"><em><strong>FAQ&#8217;s<\/strong><\/em><\/p>\n<p class=\"graf graf--p\"><strong>Q: What kinds of security credentials can IAM users have?<\/strong><br \/>\nIAM users can have any combination of credentials that AWS supports, such as an AWS access key, X.509 certificate, SSH key, password for web app logins, or an <a class=\"markup--anchor markup--p-anchor\" href=\"https:\/\/aws.amazon.com\/identity\/saml\/\" target=\"_blank\" rel=\"noopener\" data-href=\"https:\/\/aws.amazon.com\/identity\/saml\/\">MFA<\/a> device. This allows users to interact with AWS in any manner that makes sense for them. An employee might have both an AWS access key and a password; a software system might have only an AWS access key to make programmatic calls; IAM users might have a private SSH key to access AWS CodeCommit repositories, and an outside contractor might have only an X.509 certificate to use the EC2 command-line interface. For details, see <a class=\"markup--anchor markup--p-anchor\" href=\"http:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/Using_ManagingLogins.html\" target=\"_blank\" rel=\"noopener\" data-href=\"http:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/Using_ManagingLogins.html\">Temporary Security Credentials<\/a> in the IAM documentation.<\/p>\n<p class=\"graf graf--p\"><strong>Q: Which AWS services support IAM users?<\/strong><br \/>\nYou can find the complete list of AWS services that support IAM users in the <a class=\"markup--anchor markup--p-anchor\" href=\"http:\/\/docs.amazonwebservices.com\/IAM\/latest\/UserGuide\/Using_SpecificProducts.html\" target=\"_blank\" rel=\"noopener\" data-href=\"http:\/\/docs.amazonwebservices.com\/IAM\/latest\/UserGuide\/Using_SpecificProducts.html\">AWS Services That Work with IAM<\/a> section of the IAM documentation. AWS plans to add support for other services over time.<\/p>\n<p class=\"graf graf--p\"><strong>Q: How do I assume an IAM role?<\/strong><br \/>\nYou assume an IAM role by calling the AWS Security Token Service (STS) AssumeRole APIs (in other words, AssumeRole, AssumeRoleWithWebIdentity, and AssumeRoleWithSAML). These APIs return a set of temporary security credentials that applications can then use to sign requests to AWS service APIs.<\/p>\n<p class=\"graf graf--p\">Refer to more FAQ&#8217;s at <a class=\"markup--anchor markup--p-anchor\" href=\"https:\/\/aws.amazon.com\/iam\/faqs\/\" target=\"_blank\" rel=\"nofollow noopener\" data-href=\"https:\/\/aws.amazon.com\/iam\/faqs\/\">https:\/\/aws.amazon.com\/iam\/faqs\/<\/a><\/p>\n<h2><em><strong>\u201cLearn and be curious\u201d\u2026.. AWS is AWESOME!!!. Happy LEARNING!!!<\/strong><\/em><\/h2>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We have seen in detail what is AWS IAM and how to implement it in our previous blog. https:\/\/www.easydeploy.io\/blog\/what-is-aws-identity-and-access-management-iam\/ Now, in continuation of it let us discuss what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":1454,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2],"tags":[316,319,343,349,262,347,345,348,341,342,320],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What are AWS IAM (Identity and Access Management) Roles &amp; Policies?<\/title>\n<meta name=\"description\" content=\"We are discussing what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to your environment.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What are AWS IAM (Identity and Access Management) Roles &amp; Policies?\" \/>\n<meta property=\"og:description\" content=\"We are discussing what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to your environment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/\" \/>\n<meta property=\"og:site_name\" content=\"easydeploy.io\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-14T10:07:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-16T10:08:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png\" \/>\n\t<meta property=\"og:image:width\" content=\"951\" \/>\n\t<meta property=\"og:image:height\" content=\"575\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Siranjeevi R\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Siranjeevi R\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/\"},\"author\":{\"name\":\"Siranjeevi R\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#\/schema\/person\/0e7f79e0cd26f6446f7a76d9d2d3b20c\"},\"headline\":\"AWS IAM Roles and\u00a0Policies\",\"datePublished\":\"2021-07-14T10:07:49+00:00\",\"dateModified\":\"2021-07-16T10:08:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/\"},\"wordCount\":1055,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png\",\"keywords\":[\"Access Management\",\"AWS IAM\",\"aws iam console\",\"aws iam policy\",\"AWS IAM Policy examples\",\"aws iam role\",\"aws iam roles\",\"aws::iam::role\",\"iam aws\",\"iam in aws\",\"Identity and Access Management\"],\"articleSection\":[\"Amazon Web Services\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/\",\"url\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/\",\"name\":\"What are AWS IAM (Identity and Access Management) Roles & Policies?\",\"isPartOf\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png\",\"datePublished\":\"2021-07-14T10:07:49+00:00\",\"dateModified\":\"2021-07-16T10:08:36+00:00\",\"description\":\"We are discussing what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to your environment.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage\",\"url\":\"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png\",\"contentUrl\":\"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png\",\"width\":951,\"height\":575,\"caption\":\"AWS IAM\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.easydeploy.io\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS IAM Roles and\u00a0Policies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#website\",\"url\":\"https:\/\/www.easydeploy.io\/blog\/\",\"name\":\"easydeploy.io\",\"description\":\"A Cloud Architect Company\",\"publisher\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.easydeploy.io\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#organization\",\"name\":\"EasyDeploy Technologies Pvt Ltd\",\"url\":\"https:\/\/www.easydeploy.io\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2019\/02\/easydeploy.png\",\"contentUrl\":\"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2019\/02\/easydeploy.png\",\"width\":536,\"height\":100,\"caption\":\"EasyDeploy Technologies Pvt Ltd\"},\"image\":{\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#\/schema\/person\/0e7f79e0cd26f6446f7a76d9d2d3b20c\",\"name\":\"Siranjeevi R\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.easydeploy.io\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/353661218917699fcc292e9bc0da9081?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/353661218917699fcc292e9bc0da9081?s=96&d=mm&r=g\",\"caption\":\"Siranjeevi R\"},\"url\":\"https:\/\/www.easydeploy.io\/blog\/author\/siru\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What are AWS IAM (Identity and Access Management) Roles & Policies?","description":"We are discussing what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to your environment.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/","og_locale":"en_GB","og_type":"article","og_title":"What are AWS IAM (Identity and Access Management) Roles & Policies?","og_description":"We are discussing what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to your environment.","og_url":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/","og_site_name":"easydeploy.io","article_published_time":"2021-07-14T10:07:49+00:00","article_modified_time":"2021-07-16T10:08:36+00:00","og_image":[{"width":951,"height":575,"url":"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png","type":"image\/png"}],"author":"Siranjeevi R","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Siranjeevi R","Estimated reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#article","isPartOf":{"@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/"},"author":{"name":"Siranjeevi R","@id":"https:\/\/www.easydeploy.io\/blog\/#\/schema\/person\/0e7f79e0cd26f6446f7a76d9d2d3b20c"},"headline":"AWS IAM Roles and\u00a0Policies","datePublished":"2021-07-14T10:07:49+00:00","dateModified":"2021-07-16T10:08:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/"},"wordCount":1055,"commentCount":0,"publisher":{"@id":"https:\/\/www.easydeploy.io\/blog\/#organization"},"image":{"@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png","keywords":["Access Management","AWS IAM","aws iam console","aws iam policy","AWS IAM Policy examples","aws iam role","aws iam roles","aws::iam::role","iam aws","iam in aws","Identity and Access Management"],"articleSection":["Amazon Web Services"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/","url":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/","name":"What are AWS IAM (Identity and Access Management) Roles & Policies?","isPartOf":{"@id":"https:\/\/www.easydeploy.io\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage"},"image":{"@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png","datePublished":"2021-07-14T10:07:49+00:00","dateModified":"2021-07-16T10:08:36+00:00","description":"We are discussing what are AWS IAM (Identity and Access Management) Roles and Policies, how to implement them, and make the best use of it to fine grain the permission to your environment.","breadcrumb":{"@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#primaryimage","url":"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png","contentUrl":"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2021\/07\/Untitled-5.png","width":951,"height":575,"caption":"AWS IAM"},{"@type":"BreadcrumbList","@id":"https:\/\/www.easydeploy.io\/blog\/aws-iam-roles-policies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.easydeploy.io\/blog\/"},{"@type":"ListItem","position":2,"name":"AWS IAM Roles and\u00a0Policies"}]},{"@type":"WebSite","@id":"https:\/\/www.easydeploy.io\/blog\/#website","url":"https:\/\/www.easydeploy.io\/blog\/","name":"easydeploy.io","description":"A Cloud Architect Company","publisher":{"@id":"https:\/\/www.easydeploy.io\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.easydeploy.io\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.easydeploy.io\/blog\/#organization","name":"EasyDeploy Technologies Pvt Ltd","url":"https:\/\/www.easydeploy.io\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.easydeploy.io\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2019\/02\/easydeploy.png","contentUrl":"https:\/\/www.easydeploy.io\/blog\/wp-content\/uploads\/2019\/02\/easydeploy.png","width":536,"height":100,"caption":"EasyDeploy Technologies Pvt Ltd"},"image":{"@id":"https:\/\/www.easydeploy.io\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.easydeploy.io\/blog\/#\/schema\/person\/0e7f79e0cd26f6446f7a76d9d2d3b20c","name":"Siranjeevi R","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.easydeploy.io\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/353661218917699fcc292e9bc0da9081?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/353661218917699fcc292e9bc0da9081?s=96&d=mm&r=g","caption":"Siranjeevi R"},"url":"https:\/\/www.easydeploy.io\/blog\/author\/siru\/"}]}},"_links":{"self":[{"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/posts\/1401"}],"collection":[{"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/comments?post=1401"}],"version-history":[{"count":16,"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/posts\/1401\/revisions"}],"predecessor-version":[{"id":1492,"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/posts\/1401\/revisions\/1492"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/media\/1454"}],"wp:attachment":[{"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/media?parent=1401"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/categories?post=1401"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.easydeploy.io\/blog\/wp-json\/wp\/v2\/tags?post=1401"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}