AWS account credentials

Posted under » AWS on 24 May 2021

Most of it can be found by going to your profile > security_credentials

The root user must enable MFA by default. Root can do anything. So if you have collaborators, then you create 'IAM users' which by default have little priviledge. You could improve overall security by implementing MFA for IAM users.

When you have a team, you can use groups or `IAM user groups` > webmasta to make everyone have the same priviledges. Below is an example of allowing all priviledges on EC2 and its resources

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "ec2:*",
            "Resource": "*"
        }
    ]
}

As a best practice, define policies that follow the principle of granting least privilege. ie. access AWS services that are essentials and cheap.

Disable auto assign public IP when creating EC2.

Setup your VPC properly.

When setting up AWS Cli.