Create IAM User and Assign Permissions

Overview

In this step, you will create an IAM User with access to AWS services via the Command Line Interface (CLI) or SDK. This user will be assigned the two previously created policies to interact with the backend and frontend of the Serverless Invoices Scanner system.

Step 1: Access the IAM Console

1. Go to AWS Console, search for IAM, then click on IAM in the results.

2. In the left-hand menu, select Users.

3. Click the Create user button to start creating a new IAM User.

Step 2: Configure IAM User

1. User name: ai-invoice-scanner-user
2. Check the box: Provide user access to the AWS Management Console.
3. Select: I want to create an IAM user.

4. Under Console password:

   • Select: Custom password.
   • Set password: Admin@123
   • Uncheck: Users must create a new password at next sign-in.

5. Click Next to proceed to the permissions step.

💡 You can choose a different password according to your internal security policy.

Step 3: Attach Policies to the IAM User

1. In the Set permissions section, choose Attach policies directly.

2. Search for and select the following policies:

   • AIInvoiceScannerFullPolicy
   • AmplifyAdminPolicy

3. Click Next to continue.

4. Click Create user to finish creating the IAM User.

Step 4: Save Login Information

1. Click Download .csv file to save the Access Key ID and console password.

2. The file will be downloaded as an Excel sheet — be sure to store this file securely for future use.

Step 5: Verify IAM User Information

1. Click Return to users list to go back to the Users list.

2. The newly created IAM User will be listed as shown:

3. Click the user to view its detailed information.

Step 6: Create Access Key

1. On the user detail page, click Create access key.

2. Select Command Line Interface (CLI).

3. Check the box: I understand the above recommendation and want to proceed to create an access key.
4. Click Next to proceed.

Step 7: Add a Description for the Access Key

1. Description tag value: AI Invoice Scanner Project
2. Click Create access key.

Step 8: Backup Access Key

1. Once the access key is successfully created, AWS will display:

   • Access Key ID ✅
   • Secret Access Key 🔐

2. Click Download .csv file and save the file on your computer for future use.

3. Click Done to finish.

Step 9: Verify the Access Key

1. Return to the Security credentials tab, and you will see the Access Key ID listed.
2. Check that the Access Key is in Active status.

💡 Note: Make sure you saved the Secret Access Key from the previous step. If not, you’ll need to delete and recreate a new access key.

• You may deactivate or delete this key when no longer needed.
• Never commit Access Keys to GitHub or share them publicly.
• If your key is exposed, go to IAM > User > Access Keys > Deactivate then Delete.