How To Assign Remove Policy To IAM User Group Using CLI
How To Assign Remove Policy To IAM User Group Using CLI
In last session we have learned how to create IAM users and groups. If you missed that please go through that if required.
How To Assign Policy To User Group:
To assign policy to group we will need ARN which is Amazon unique resource name. To get ARN of particular policy got to AWS management console by navigating IAM-Policies then click on 'Administrator Access' policy to get ARN of this policy.
Here lets assume we want to use 'Administrator Access' policy for IAM group but we can select any other policies from AWS console as per our requirement.
aws iam attach-group-policy --policy=arn:aws:iam::aws:policy/AdministratorAccess --group-name pggroup
How To Remove User From IAM Group:
We can use command below to remove any user from IAM group.
aws iam remove-user-from-group --group-name pggroup --user-name pgtestuser
Delete IAM Group Using CLI:
aws iam delete-group --group-name pggroup
Before executing this command we need to detached policy of this group otherwise it will throw error. Like "An error occurred (DeleteConflict) when calling the DeleteGroup operation: Cannot delete entity, must detach all policies first."
So lets first remove policy from this IAM group using command below.
aws iam detach-group-policy --policy=arn:aws:iam::aws:policy/AdministratorAccess --group-name pggroup
After executing this command, this group has no users and policies assigned to it. Now we can remove this IAM group using CLI successfully.
aws iam delete-group --group-name pggroup
We can verify this group from AWS console once it has been deleted.
PHP Web Technology Funda | AWS Cloud
Read my blog here : https://www.howtoinmagento.com/
Tips & Tricks of PHP Frameworks & AWS Cloud Computing
aws console,aws login,amazonas,aws ec2,aws iam,amazon console,aws console login,iam login,s3 bucket,terraform aws,aws account,amazon aws console,aws security groups,aws sts,aws access key,aws arn,amazon s3 bucket,aws s3 bucket,aws iam role,aws mfa,amazon s3 login,aws credentials,create aws account,aws policy generator,iam role,aws cli credentials,s3 bucket policy,aws active directory,aws cli profile,amazon iam,aws account id,aws cli lambda,aws cli assume role,i am single,s3 login,iam policy generator,iam policy,s3 console,aws iam login,aws account login,aws assume role,aws iam policy,delete aws account,aws bucket,aws s3 bucket policy,amazon bucket,iam user,aws roles,amazon s3 console,aws profile,aws console sign in,s3 permissions,aws key,what is arn,s3 group,i am used to,aws cli iam,group policy command,aws policy simulator,s3 access key,iam user name,sts aws,aws policy,aws iam cli,aws s3 login,s3 actions,iam instance profile,aws s3 list buckets,iam policy simulator,terraform iam role,amazon arn,aws bucket policy,aws access id,aws iam policy generator,aws s3 put,aws password policy,terraform aws instance,aws environment,aws iam user,aws multi factor authentication,aws s3 permissions,aws cross account access,aws security group best practices,aws identity and access management,aws s3 console,cloudformation iam policy,aws root account,aws cli mfa,aws mfa setup,s3 bucket limit,aws s3 policy,mfa device,aws multiple accounts,aws userid,aws s3 arn,aws enable mfa,get aws access key,aws s3 bucket permissions,aws iam console,aws s3 actions,s3 policy generator,aws s3 limits,terraform aws example,s3 policy,s3 iam,aws iam documentation,amazon resource name,aws s3 download folder,iam role aws,aws s3 access denied,aws user group,aws managed policies,iam best practices,amazon s3 account,cloudformation iam,aws users,aws admin console,aws microsoft ad,aws iam best practices,iam account,aws s3 key,iam group,aws policy validator,aws s3 access key,aws iam sign in,aws policy principal,s3 iam actions,aws iam cli,aws inc,aws s3 client,install aws cli on linux,install aws cli on ubuntu,install aws cli windows,using aws cli,amazon aws cli,aws cli create ec2 instance,aws cli default output format,aws cli ec2 create instance,aws cli examples,aws cli for mac,aws cli kms,aws cli list s3 buckets,aws cli os x,aws cli osx,aws cli output,aws cli s3 ls,aws cli s3api,aws cli use profile,aws cli vpc,aws cli whoami,aws features,aws install cli,aws s3 cp command,aws s3 cp multiple files,aws s3 mb,ec2 cli,pip awscli,windows aws cli,aws autoscaling cli,aws cli autocomplete