Automated user migration and management of AWS Identity and Access Management (IAM) resources

Lionell Jenious
3 min readJun 2, 2024

--

In this project based on a real-world scenario, I acted as a Cloud Specialist with the mission to migrate users in an automated way and manage AWS IAM (Identity and Access Management) resources.

One Hundred (100 ) users needed to be migrated and have MFA (Multi-factor authentication) enabled on their accounts, as this is a security best practice.

I needed to consider automating the processes to avoid repetitive and manual tasks in the AWS console.

I automated the creation of on-premise corporate offsite user accounts into the AWS Cloud via the Identity Access Management (IAM) Console.

Using GitBash with AWS CLI and a shell script, I queried a customer-provided, comma-delimited CSV file packed with IT team members' names, groups, and passwords, and swiftly set up individual accounts.

This streamlined process transformed a previously manual task into an efficient, automated workflow, dramatically speeding up the project.

This experience highlighted my practical expertise with AWS IAM and demonstrated the power of automation in cloud management.

Tasks Associated with Automation:

Setup and Configuration:

  • Utilized AWS CloudShell for script execution and AWS CLI commands.
  • Ensured GitBash was properly set up within CloudShell for scripting.

Prepare the CSV File:

  • Obtained the customer-provided XLS file and reformatted it as a comma-delimited CSV file.
  • Verified the CSV file contained the required fields: names, groups, and passwords of IT team members.

Script Execution:

  • Executed the shell script in GitBash within CloudShell to automate the creation of user accounts.
  • Monitored the script for any errors or issues during execution.

Verification and Validation:

  • Verified that all user accounts were created correctly in the AWS IAM Console.
  • Checked that users were assigned to the correct groups.
  • Ensured that initial passwords were set as per the CSV file.

Documentation and Reporting:

  • Documented the process for future reference.

Additional References

--

--

Lionell Jenious
Lionell Jenious

Written by Lionell Jenious

Cloud Software Network Engineer | AWS | AI/ML | Blockchain | Azure | Google Cloud | VMware | Cloud Computing | DevOps | Software Defined Networks SD-WAN

No responses yet