Create IAM role

Create IAM role

1. Go to IAM service administration interface

• Click Roles.

2. Click Create role

3. In the Select trusted identity section:

• Click on AWS service.
• Service or use case: EC2 to create an IAM role to use for the application running inside EC2 instance.

4. In the Policy name box, enter AmazonS3FullAccess.

• Click AmazonS3FullAccess, we will grant full access to access and upload files to the S3 bucket we created.
• Click Next.

5. Set Role name to EC2RoleS3Upload. Click Create role.

Next, we will use this role to assign to the EC2 instance and make it possible for our application to upload files to S3 without using the access key and secret access key in the code.