Scenario

You need to set up a new administrative user account for regular use instead of using the root account.

Task

Create an IAM user named devops-admin with console password access. Add the user to the admin group (which should have the AdministratorAccess policy attached), and tag the user with key Role and value DevOps.

Note: You can use either the AWS Management Console or AWS CLI to complete this task.

Step 1: Create the IAM user with console password access

aws iam create-user --user-name devops-admin
aws iam create-login-profile --user-name devops-admin --password 'YourSecurePassword123!'

Creates the user account and enables console access with a password.

Step 2: Attach the AdministratorAccess policy to the admin group

aws iam attach-group-policy --group-name admin --policy-arn arn:aws:iam::aws:policy/AdministratorAccess

Attaches the AWS managed policy that grants full administrative permissions to the group.

Step 3: Add the user to the admin group

aws iam add-user-to-group --user-name devops-admin --group-name admin

Adds the user as a member of the admin group, inheriting all policies attached to that group.

Step 4: Tag the user with Role=DevOps

aws iam tag-user --user-name devops-admin --tags Key=Role,Value=DevOps

Adds metadata tag to the user for organizational purposes and cost tracking.

Step 5: Verify the configuration

aws iam get-user --user-name devops-admin
aws iam list-groups-for-user --user-name devops-admin
aws iam list-user-tags --user-name devops-admin

Confirms the user exists, is in the admin group, and has the correct tag applied.