AWS - Create an independent sandbox for an existing IAM user

user_14897019 0
Viewed 206

I am trying to create a new project inside my organization that is going to have his own budget. I am trying to have an independent project inside my organization called sanbox-aws-de with it's own budget and the owner of this project would be john.doe@company.com (I just want him to be able to loggin into that project, create resources and delete resources)

This is the current overview of my organization on AWS (I changed project names, IDs and emails):

enter image description here

I recently created a new project called sanbox-aws-de. I want the owner of this new project to be John Doe (john.doe@company.com). When I tried to create the project sanbox-aws-de with john.doe@company.com, it did not work because "the email already exists".

enter image description here

So what I have done is I created the account as john.doe+sandboxs@company.com. The new project was successfully created but I am not sure it's what I am looking for and not sure what would be the correct way to loggin.

I tried to loggin into the new account as John Doe but it did not work:

enter image description here

How can I create a simple independent project for John Joe with his own budget for the project?

aws-organizations amazon-iam amazon-web-services
1 Answers

The console you have open (in the last screenshot) is for IAM Users, but you are attempting to sign in with the root account credentials (which are based on the email address you used to create the account).

It sounds like you want to sign in as an IAM User in the new account you have created. To do this need to create an IAM User in that account. You need to assume a role in the new account, or sign in with the root credentials (i.e. the email john.doe+sandboxs@company.com and password), and then create the IAM User.

You can get to the root user sign in via the "Sign in using root user email" link below the sign in button in your screenshot. If you don't have the password for that root user (because you created it via AWS Organizations), you will need to do a reset password on it.

AWS Root user sign in

Ideally you would not use IAM Users for humans, and instead use SSO to manage access, but it doesn't sound like you're using it currently and setting it up is beyond a StackOverflow post. AWS has a service for SSO, and you can get started with it relatively easily if you're inclined.

user_9721420
Related