Could not access AWS through IAM user

Question

In chrome browser, logged into AWS account with user name(Administrator) part of Administrators group.

Created an IAM user (Bob) with Custom managed policy(Demo1) as shown below:

In firefox, tried to login with user Bob, below is the error:

Bob is part of no group.

With or without policy(Demo1) attachment to user Bob, user Bob could not login...

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "ec2:*",
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Deny",
            "Action": "ec2:RunInstances",
            "Resource": "*",
            "Condition": {
                "ForAllValues:StringNotEquals": {
                    "ec2:InstanceType": "t1.*,t2.*,m3.*"
                }
            }
        }
    ]
}

Why user Bob cannot login?

You should edit your question to include the demo1 policy xml. — Dave S, Jul 13 '19 at 22:39
@DaveS Query edited.... with or without policy, result is same — overexchange, Jul 13 '19 at 22:47

score 2 · Accepted Answer · answered Jul 13 '19 at 23:04

2

Users do not require any permissions to login to the AWS Management Console. (However, they won't be able to see/do anything to the services themselves.)

Therefore, if you are unable to login to the console, you either have the wrong login information (Account, Username, Password) or the user does not have a Console Password enabled.

Take a look in the IAM User Security credentials tab to obtain the right console sign-in link and to verify that a password has been enabled.

answered Jul 13 '19 at 23:04

John Rotenstein

241,921
22
380
470

In customer enabled option, I made the option to Custom password.. it worked – overexchange Jul 13 '19 at 23:54
But trust me, I did the same during creation of user account – overexchange Jul 14 '19 at 00:20

score 0 · Answer 2 · edited Jul 22 '23 at 15:50

0

It is strange that I was not able to login into AWS management console using IAM user information. I went to the root account and copied the console sign-in link for the IAM user, then entered my credentials. It started working.

edited Jul 22 '23 at 15:50

kmnowak

804
1
8
23

answered Jul 09 '23 at 06:36

user22197696

1

Could not access AWS through IAM user

2 Answers2