AWS Administration Cookbook

How to do it...

1. Create a new group by running this CLI command:

      aws iam create-group --group-name <group-name>

2. The output looks like this:

      {           "Group": {             "Path": "/",             "GroupId": "AGPAIHM2XJ2ELQTNYBFQQ",             "Arn": "arn:aws:iam::067180688831:group/PowerUsers",             "GroupName": "PowerUsers"           }       }

3. The group doesn't have permissions to do anything yet, so you'll need to attach a policy to it. You can do it with this command (which unfortunately doesn't provide any feedback if it successfully runs):

      aws iam attach-group-policy \        --group-name <group-name> \        --policy-arn <policy-arn>

4. You can find the Amazon Resource Name (ARN) for the policy you'd like to attach in the AWS IAM web console. You can also run the following CLI command to ...