The AWS Identity and Access Management service ensures the security of the AWS account and its resources. It allows the user to create policies with permissions allowing or denying profiles to use AWS services attached to it. These policies provide control to the customers over their accounts and resources used on different services.

This guide will explain how to create policies in AWS Identity and Access Management.

How to Create Policies/Permissions in AWS IAM?

To create an IAM Policy in AWS, visit the IAM dashboard from the AWS Management Console:

On the IAM dashboard, head into the “Policies” page from the left navigation panel:

Click on the “Create policy” button from the Policies page:

Start configuring the policy by selecting the “EC2” service to assign permissions for:

Select the “All EC2 actions” checkbox to allow or deny all EC2 actions from this policy and click on the “Switch to deny permissions” link to deny permissions:

Scroll down the page to review all the configurations and then click on the “Next” button:

Type the name of the policy with its description from the “Review and Create” page:

Permission for policy section contains the name of the opted service:

Click on the “Create policy” button after reviewing the configurations to finish the process:

Once the policy is created successfully, click on the “View policy” button to head to its summary page:

The policy with EC2 permissions has been created successfully in AWS IAM:

Scroll down to the permissions section that will contain the summary of the permissions attached to the policy:

That’s it! The process of creating a policy with EC2 permissions to deny all actions attached to it in AWS IAM has been successfully completed.

Conclusion

To create policies and permissions in AWS IAM, head into the service dashboard from the AWS Management Console. On the IAM dashboard, visit the Policies page from the left panel and create a policy with AWS service permissions attached. Review the configurations before completing the process of creating a policy. This guide has explained the process of creating a policy with EC2 permissions to deny all actions attached to it in AWS IAM.