Creating IAM policies

In this recipe, we will learn how to create IAM policies from the Management Console, as well as the AWS CLI. We will create an IAM policy for an S3 bucket.

Getting ready

We need a working AWS account with the following resources configured:

• A user with no permissions and a user with administrator permissions. Add these users to two groups. We should configure CLI profiles for these users. I will be calling the users and their CLI profiles testuser and awssecadmin and the groups awstestusergroup and awssecadmingroup, respectively.

awssecadmin is a user with full administrator permissions. In real-world projects, we won't have a single user with all permissions. Instead, we will segregate permissions...