MultiCloud Classroom notes 06/July/2026

AWS IAM role

1. Trusted policy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "ec2.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}

1. add permissions

   1. AmazonS3FullAccess
   2. AmazonSSMFullAccess

2. create ec2 instance and attached role

without Role

1. create Iam user
2. policy to provide access
3. this secuirty issue to store cridentals

Task:

1. create role and attach permissions for s3 upload and delete files

aws s3 cp demo/ s3://ram-demo-qt-role-aws/demo/ --recursive
aws s3 rm s3://ram-demo-qt-role-aws/demo/1.txt