IAM User that can connect to EC2 instance via SSH


I am a newbie (still exploring) and on AWS Free tier. I have to perform the following :-

Create IAM users and perform the following functions:-

  1. AWSAdmin- your user that can manage everything in account
  2. EC2Admin user that can connect to your EC2 users via SSH and can`t work with RDS
  3. RDSAdmin user that can manage RDS, but can`t manage EC2

For creating IAM User I am following :- https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html#id_users_create_console

Inorder for EC2Admin user that can connect to EC2 users via SSH and cannot work with RDS I understand I can attach policy which allow EC2 access alone, but how can a user created through IAM perform ssh to EC2 instance?

I would be happy to know if there is any blog or documentation which suggests any steps to follow?

2 Answers

You can explore EC2 Instance Connect and attach necessary IAM permission

answered 3 months ago

Please if you can clarify, are you talking about a role-based policy or resource-based policy. If to want to restrict your RDS use a resource-based policy on that. For Role based policy, attach that to admin user.

profile picture
answered 3 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions