AWS Journey: Day 3 Achievements

What is S3 Bucket in AWS?

Amazon Simple Storage Service (Amazon S3) is a scalable object storage service provided by Amazon Web Services (AWS). It is designed to store and retrieve any amount of data from anywhere on the web.
S3 is commonly used for a variety of purposes, such as backup and restore, archiving, content distribution, and hosting static websites.
S3 Documentation: Click me

What is IAM in AWS?

IAM stands for Identity and Access Management. IAM is a web service that helps you securely control access to AWS resources. It enables you to manage users, groups, and permissions to securely access and use AWS services and resources.

key components of IAM:

Users
Groups
Roles
Policies
IAM Documentation: Click me

What is AWSCLI?

The AWS Command Line Interface (AWS CLI) is a set of open-source command-line tools for interacting with Amazon Web Services (AWS) services. It allows users to control and manage AWS services directly from the command line, rather than using the AWS Management Console.
AWSCLI Documentation: Click me

Tasks:

Make a private S3 bucket in AWS and change the policy so you can access its stuff without making it public.

Note: Task1 will help you to understand how we can secure our S3 buckets.

ans:

Bucket created with blocked public access

Attached this bucket policy to access, create, and modify the created S3 bucket to particular IAM user

  {
      "Version": "2012-10-17",
      "Statement": [
          {
              "Sid": "AllowUserAccessToBucket",
              "Effect": "Allow",
              "Principal": {
                  "AWS": "arn:aws:iam::851725581476:user/aws-zero-to-hero-course-user"
              },
              "Action": [
                  "s3:GetObject",
                  "s3:PutObject",
                  "s3:ListBucket"
              ],
              "Resource": [
                  "arn:aws:s3:::aws-zero-to-hero-day-3",
                  "arn:aws:s3:::aws-zero-to-hero-day-3/*"
              ]
          }
      ]
  }

Then, I clicked on Save changes
After that, I launched the instance to test the working of this
You can see that i can not access all buckets, i can only access the specified bucket in my bucket policies, even though my IAM user does not have S3 permission
You can see that I can upload a file in my bucket without making it public by providing access to particular user in bucket policy
Content of test.txt:

Configure AWSCLI on your Ubuntu machine.

ans :
Create an EC2 instance using AWSCLI.

Note: Task3 will help you to understand AWSCLI more clearly.
Hint:Resource to complete task3: EC2 using AWSCLI

ans:

So, I have created the instance using the above guide
Which I can SSH too to it.
To run an instance with Tag Name, I ran this command: aws ec2 run-instances --image-id=ami-0fc5d935ebf8bc3bc --instance-type=t2.micro --region=us-east-1 --key-name=MyKeyPair --security-groups=my-sg --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value=test-instance}]'
Note: An Instance will not be SSH if the private key is not properly formatted.

Setting Up AWS IAM for a New Team Member

Scenario: Imagine you're working as an IT administrator at GlobalTech Inc., a multinational company with diverse cloud computing needs. The company heavily relies on AWS services for its operations. You have a new colleague, Alex, who recently joined your team. Alex's role involves monitoring the company's computing resources and managing data storage. Your task is to set up Alex's AWS access.

What needs to be done:

Configure AWS IAM (Identity and Access Management) to provide Alex with specific access rights. Alex should be able to:
- View EC2 Instances: Alex needs to monitor the virtual servers running in the AWS cloud but should not be able to modify them.
- Create S3 Buckets: Alex is responsible for creating new storage spaces for various projects.

ans:

So, I have created the User Alex with EC2ReadOnlyAccess and AmazonS3FullAccess for the above scenario
After that I logged in as Alex
And i tried to delete the EC2 service but i can not delete it because Alex has only Read permission
At the other place, with the permission of S3 full access, I can create bucket and upload object in that

Completed Day 3 of AWS Zero to Hero Challenge

AWS Zero to Hero day 3

Comments

More from this blog

My First KubeCon + CloudNativeCon India 2026 Experience 🚀

No Keys, No Risk - Secure Secrets with AWS Secrets Manager & EC2 IAM Roles

My Journey to Becoming an AWS Community Builder (Containers Category)

AWS Private IP vs Public IP vs Elastic IP

AWS STS: Secure Temporary Credentials

What is S3 Bucket in AWS?

What is IAM in AWS?

key components of IAM:

What is AWSCLI?

Tasks:

Make a private S3 bucket in AWS and change the policy so you can access its stuff without making it public.

Configure AWSCLI on your Ubuntu machine.

Create an EC2 instance using AWSCLI.

Setting Up AWS IAM for a New Team Member

Command Palette

Comments

More from this blog

What is S3 Bucket in AWS?

What is IAM in AWS?

key components of IAM:

What is AWSCLI?

Tasks:

Make a private S3 bucket in AWS and change the policy so you can access its stuff without making it public.

Configure AWSCLI on your Ubuntu machine.

Create an EC2 instance using AWSCLI.

Setting Up AWS IAM for a New Team Member