Day 18 : Create Read-Only IAM Policy for EC2 Console Access

Welcome back to Day 18. Today, we will learn how to create a read-only IAM policy for accessing the EC2 console. You need to create a read-only IAM policy for access to the EC2 console with the name iampolicy_kareem. In this lab you need to create customer-managed policy.

What an IAM Policy Does

It tells AWS:

• Who (users, roles, groups, services)

• Can do WHAT (actions like s3:PutObject, ec2:StartInstances)

• On WHICH resources (ARNs like arn:aws:s3:::my-bucket/*)

• Under what CONDITIONS (optional, using Condition block, like IP address restrictions)

Types of IAM Policies

1. Identity-based policies
   Attached to IAM users, groups, or roles.

1. Resource-based policies
   Attached to AWS resources (S3 bucket policy, SNS topic policy).

2. AWS-managed policies
   Predefined by AWS (e.g., AmazonEC2FullAccess).

3. Customer-managed policies
   Policies you create.

Congratulations you did it. It looks good. This lab was successfully completed without any errors. See you in day 19. If you have any issues please let me know I will be happy to assist you. Stay tuned and learn together. If you find my article useful, please kindly like and share it.