IAM Contd

• Write an AWS CLI to Create a policy.
  • Create a local json with ec2 readonly and s3 readonly
  • give the policy name as clipolicy
    
• Problem: We will be in many cases working parallely on multiple projects or environments in AWS as an Admin
  
• Now every time i need to work on a different project executing aws configure and giving credentials is a painful job
• To solve this kind of problems AWS CLI supports Named Profiles
• As of now also we are working under a profile called as default
• Lets create two iam users for projectA and projectB
• Now lets configure using named profiles
  
  
• Everytime passing the profile is also not a great idea, So AWS Allows to set the profile for the next set of execution commands by setting an ENVIRONMENTAL VARIABLE CALLED AS AWS_PROFILE

# linux or mac
export AWS_PROFILE=projecta
# Windows Powershell
$env:AWS_PROFILE=projecta

AWS Organizations

• This ia an account management service that lets organization consolidate multiple AWS accounts into an organization.

Active Directory Sync to AWS