/
How to Grant User AWS permission

How to Grant User AWS permission

    1. Connect AWS CLI

      1. How install AWS CLI

    2. List of AWS group Ids

    Group

    Group ID

    Group

    Group ID

    AWS-ECS-Admins

    14a8c4e8-b0b1-705e-6a21-fce2f4e0c788

    AWS-Adminstrator

    14d834f8-50f1-70ba-5917-4a2879f0f9ff

    AWS-EKS-Admins

    9418c4d8-8081-702a-88fb-52126a30552a

    AWS-Billing-ReadOnly

    c4789488-3021-70f6-1d86-d74525b29186

    AWS-EC2-ReadOnly

    d4b864b8-3061-7032-4c70-26b656f37610

    AWS-ViewOnlyAccess

    04e88498-b021-70cb-cb5d-a54670fa1649

    AquilaClouds-Corporate-Viewer

    f4a8b418-a011-70d5-deac-192adfd6db60

    AquilaClouds-Corporate-Admin

    44883448-d0a1-7022-038f-c92279fa4568

    AquilaClouds-SAAS-Operations-Admin

    2448c4d8-b001-7095-5378-c5e0d18d30d4

    AquilaClouds-SAAS-Operations-Viewer

    94e864b8-4031-70df-4b0c-951be1db61e2

    1. Get User Id

      1. Open IAM Identity Center

      2. Click on Users

      3. Select user from the List

      4. Click on General information and Copy the User ID

    2. Add user to respective AWS Group

      1. Copy the AWS group ID from the above list and user ID from the above step and update the below Command

    aws identitystore create-group-membership --identity-store-id d-9067ba7151 --group-id group ID --member-id UserId=userid --output json For eg. User need Access to AWS billing read only Permission Then use below code aws identitystore create-group-membership --identity-store-id d-9067ba7151 --group-id aws identitystore create-group-membership --identity-store-id d-9067ba7151 --group-id c4789488-3021-70f6-1d86-d74525b29186 --member-id UserId=44e8b498-0031-70f5-1d4e-d0ebf15eaaa0 --output json --member-id UserId=9428e468-f001-7028-5f4c-cfffde5334fd --output json

    1. Paste the Common in AWS CLIP and press enter, The will receive the output like this

    { "MembershipId": "34d83418-30b1-7090-c604-0fcdfa6a0e2b", "IdentityStoreId": "d-9067ba7151" }

     

    • If user is not in the list that means user is not provision on AWS, Please raise Jira request to add user in AWS

    • If you need create a Group please raise a request or contact ITsupport@aquilaclouds.com