OK.
Time to get started.
And now let me show you this really awesome hack.
So we're going to do is go over to iron ore.
It stands for his identity access management.
Now we're in that what we want to do is create a policy, as you can see here, Amazon have already
created a lot of policies, force.
She may remember when we set up our accounts, we used one called system administrator, which meant
triple A access to absolutely everything in the real world.
That's not ideal.
So with all these different policies, you can create really fine tune access.
Now, what we're going to do next is click create policy.
We select the service and I'm going to pick Galatia.
Now, this is useful.
Cold storage.
So you may be aware of financial regulations.
We have to keep information for five to seven years because it's infrequently access.
You can get cheaper storage by putting it into Glozier.
Next, we can pick some really old requirements.
So we'll go with list and writes.
We'd specify a in now because I don't have Glacier set up.
We can select school resources.
Now, what we're interested in here is the Jason because that is what makes up every A.W. US policy.
And you may be wondering why is this useful and why are we doing it this way now?
There are some weird people in this world who will set up there.
I am policies in Jason.
Role is probably the best word I can use.
They will start from scratch and create policies from scratch.
Now I tend to find that a bit weird and what I would do to avoid any errors at all is I would do it
through a console like this, because what we can do is generate the Jason we need and then import it
into terrible.
We don't actually have to go ahead and create this so we can click on review policy and then we can
click additional permissions.
So now we can choose another service.
Let's pick something we what we've seen, let's try easy to.
And again, we want right and tagging.
Somewhat click or resources, as you can see, there's a big warning down there.
Let's make it even bigger.
Let's pick another one.
So click on add additional click.
Choose a service and let's pick ESFS.
It's another type of storage in Amazon.
It's basically an office, but the A.W. s equivalents.
So you might want list them read and resources.
Again, this is normally something you would pics, you might say, OK.
Only access this particular resource.
Instead, what we're doing is St..
Texas, all of them, because I didn't have them set up.
So now what we can do is scroll up.
It goes to Jason.
And this is going to be huge.
But as you can see, we've got all our permissions in that glacier, we got easy to.
And if we look carefully, we should be able to see if s in that as well.
There we go.
A plastic fall system.
As you can see, four hundred and one lines of code.
So let's go ahead and copy it.
And as you can see, it's a really clever way of doing this.
We can use the visual editor and we don't have to save anything.
This isn't going to affect anything either.
What we can do is use it to create the Jason policy we want with the permissions.
We also want and now let's jump into setting this up in terrible.