hands-on lab

Introduction to IAM

Up to 1h
You can pause this lab for up to 1h
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.


AWS Identity and Access Management (IAM) enables you to securely control access to AWS services and resources for your users. The service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon RDS, and the AWS Management Console. 

During this lab experience, you will learn how to create IAM users and groups with specific policies.

Learning Objectives

Upon completion of this lab you will be able to:

  • Create IAM groups
  • Create IAM users
  • Use IAM credentials to log in as created users

Intended Audience

This lab is meant for:

  • Those preparing to work with AWS
  • Those preparing for certification in AWS


You should be familiar with:

  • AWS Management Console and AWS CLI familiarity are helpful but not required


December 11th, 2023 - Updated the instructions and screenshots to reflect the latest UI

March 22nd, 2023 - Updated the instructions and screenshots for IAM user creation 

February 6th, 2022 - Updated the instructions and screenshots to reflect the latest UI

September 28, 2021 - Updated to show signing into Console as a recently created user

May 4th, 2021 - Updated to reflect the latest Console experience

February 5th, 2021 - Updated to reflect the latest Console experience

July 17th, 2019 - Refactored the Lab to improve the user experience

December 5th, 2018 - Added a validation Lab Step to check the work you perform in the Lab

September 11, 2018 - Updated instructions and student permissions to work with the new AWS IAM experience

Environment before

Environment after

About the author

Matt Martinez, opens in a new tab
Cloud Content & Labs QA
Learning paths

Matt has worked for multiple Fortune 500 companies as a DevOps Engineer and Solutions Architect. He is an AWS Certified DevOps Engineer - Professional, and an AWS Certified Solution Architect - Associate. He enjoys reading and learning new technologies.

Covered topics

Lab steps

Logging In to the Amazon Web Services Console
Creating an IAM User Group
Creating an IAM User
Logging in using the new IAM credentials