Interaction Session 4
on
Cloud Computing
noc25-cs11
by
Mainak Chakraborty
21st February 2025
Indian Institute of Technology, Delhi
1
Points to Remember:
• Total 8 more Discussion sessions to be taught
lectures and Tutorials
• Any specific problem, please upload in the
discussion forum, I will try to reply within 24
hours
• PPT and Video will be shared with everyone
• Assignments will not be solved but similar
problems will be solved.
TOPICS TO BE COVERED
1. AWS-Hands on session
2. Root User vs IAM users
3. Create IAM user
4. Multi-Factor Authentication
5. Amazon EC2
Background
Source: https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_identity-
management.html
IAM User
Source: https://blog.awsfundamentals.com/aws-iam-users
Root User vs IAM user
Json
Source: https://jsonexamples.wordpress.com/2018/03/23/difference-
between-json-and-xml/
The information in a statement is contained within a series
of elements.
• Version – Specify the version of the policy language
that you want to use. We recommend that you use the
latest 2012-10-17 version. For more information,
IAM policy
see IAM JSON policy elements: Version
• Statement – Use this main policy element as a
container for the following elements. You can include
more than one statement in a policy.
• Sid (Optional) – Include an optional statement ID to
differentiate between your statements.
• Effect – Use Allow or Deny to indicate whether the
policy allows or denies access.
• Principal (Required in some circumstances) – If you
create a resource-based policy, you must indicate the
account, user, role, or federated user to which you
would like to allow or deny access. If you are creating
an IAM permissions policy to attach to a user or role,
you cannot include this element. The principal is
implied as that user or role.
• Action – Include a list of actions that the policy allows
or denies.
• Resource (Required in some circumstances) – If you
create an IAM permissions policy, you must specify a
list of resources to which the actions apply. If you
create a resource-based policy, it depends on the
resource you're using as to whether this element is
required or not.
• Condition (Optional) – Specify the circumstances under
which the policy grants permission.
To learn about these and other more advanced policy
elements, see IAM JSON policy element reference.
MFA
Source :https://kevinkiruri.medium.com/enforcing-mfa-on-aws-66b228df699b
AWS Account
Your Account's Root User :
•Usage of the root account, especially for
daily tasks, introduces several major
risks: Accidental misconfiguration or even
a small mistake when using the 'root' user
can have catastrophic consequences due
to the unrestricted permissions.
• AWS Identity and Access Management IAM
user
Checklist
• AWS Free-tier Account
Step 1
• IAM User
Step 2 • MULTI-FACTOR Authentication
• Budget
Step 3 • zero spend + Monthly spend
Source : https://kevinkiruri.medium.com/enforcing-mfa-on-aws-66b228df699b
IAAS: Amazon EC2 Use Free-tier
functions only
An EC2 instance is a virtual server in the AWS Cloud. --> Close
Features of Amazon EC2
Amazon EC2 provides the following high-level features:
Instances
Virtual servers.
Amazon Machine Images (AMIs)
Preconfigured templates for your instances that package the components
you need for your server (including the operating system and additional
software).
Instance types
Various configurations of CPU, memory, storage, networking capacity, and
graphics hardware for your instances.
Amazon EBS volumes
Persistent storage volumes for your data using Amazon Elastic Block Store
(Amazon EBS).
Instance store volumes
Storage volumes for temporary data that is deleted when you stop,
hibernate, or terminate your instance.
Key pairs
Secure login information for your instances. AWS stores the public key and
you store the private key in a secure place.
Security groups
A virtual firewall that allows you to specify the protocols, ports, and source IP https://aws.amazon.com/ec2/pricing/on-demand/
ranges that can reach your instances, and the destination IP ranges to which
your instances can connect
https://www.geeksforgeeks.org/amazon-ec2-creating-
an-elastic-cloud-compute-instance/
Use Free-tier
functions only
Hands-on Amazon EC2
The End
