1 Answer
- Newest
- Most votes
- Most comments
0
IAM policies can be set directly for IAM users.
However, as a best practice, do not set IAM policies directly for IAM users, but create an IAM group and tie IAM policies to that group.
After that, it is best practice to make the IAM user belong to an IAM group.
Also, when creating an IAM role, if you do not have a trust policy set up, you will probably get an error in the first place when creating the role.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html
Relevant content
- asked 7 months ago
- Accepted Answerasked 4 years ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated a year ago