How to assign Roles for EC2 instance

Roles enable us to interact with AWS platform, without having to our EC2 instances access key id and secret key id's. 

in the below post, i will show you. How roles interact with EC2 instances.

Practical Steps:

1. Login to AWS console.
2. Navigate to services  --> Security,identity & Competence -->IAM as highlighted below.

3.To view already created roles.Click on Roles in the left side menu. Then Click on Create role option as shown below.                                                                                                                                    

4. Then the below resultant screen will appears.Choose the services that would be using this role.Here i want to use role to EC2 instance. So i am choosing with EC2.

followed by Next.

5. Provide policy information in the below screen. here i am giving Administrator Access policy. and click on Next.        

6.Provide role name in the below highlighted field.Click on create role.                                                     

7.Assign role to EC2 instance: Now navigate to running EC2 instance screen(Services -->Compute section -->EC2-->Running instances). 

Then the screen similar to the below screen will appears.Navigate to Actions from the menu --> instance settings --> Attach/Replace IAM Role.

8. Select the required role that need to assign to EC2 instance & Click on Apply.                                                                   

9.That's it. IAM role assigned to EC2 instance successfully. Click on Close.                                                      

Note: Basically the credential of each EC2 instance are available in home/.aws directory.if the                 administrator role is assigned to particular EC2,then even after deleting the hidden .aws directory in the home direction.Our EC2 instance can be accessed with SSH.                                                                   

Case studies where IAM roles are required for EC2 instance:                                                                   

Creating new IAM users

Following up to my previous post:

Here are the practical steps involved in creating new IAM users in AWS

IAM user are defined global by default.Means if one IAM user created in one specific region,He/She can access in their AWS resources across other AWS regions also. 

1. Click on Create individual IAM users option,As shown in the below screen shot.But before that make sure that you are in Dashboard section.

2.Click on Add user now.

3. Enter IAM user name,Access type,Console password parameters & Require password reset option details based on user specific. Then Click on Next permissions button in the right bottom.

     4. Now if the AWS account is new one, and No user groups are created till now.Need to create one IAM user group here.

5.Provide the Group name and assign suitable Policy as shown below.                                                       

6. For correct select of Policy based on description of the policy and search in google for IAM user policies.and select correct policies based on requirements.

 7. Then click on Create group option.As shown in the above screen  right corner.                                

8. Review the parameters and click on Click review conformation.                                                     

9. Review again and Click on create user, Which is available in the right side corner.                     

10 in the below screen shot.                                                                                                              

1. Represents for successfully creation of user.                                                     

 2.Provides option to download IAM user deatils in Excel format.                     

3.Provides the details of Access key details.                                           

4.security access key deatils.                                                                   

5.Password details of IAM user to access AWS console.                       

 

11. Then in the Dashboard section, user creation and Group creation tasks are with green status now.

SAP HANA Notes 33: Assign the OS User and Group for High Isolation

supporting links:

how to assign existing OS user and OS group for tenant  isolation: Snote:2811263