# AWS admin user + API access key

Ok let's create an AWS admin user with the AWS **IAM console** :

![](https://681104499-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LhjKavWMofrik61tHfB%2F-LjAXtKKiw4dOo71O3To%2F-LjAqRZDJCILyfHtTpeQ%2Fimage.png?alt=media\&token=b1cacff6-0b59-4900-bc07-79ca0bcb1474)

We'll give AWS console acces to this ZeFerby guy, so he needs a _**console password**_.

And we want him to be able to use SDK-based and third-party tools like _CloudBerry Explorer for Amazon S3_, so he'll need  _**programmatic access**_ as well.

Finally this guy is only a temporary user in one of my accounts, so i give him a simple password that will not live long...

![](https://681104499-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LhjKavWMofrik61tHfB%2F-LjAXtKKiw4dOo71O3To%2F-LjAwmidylp1qBtFO3Td%2Fimage.png?alt=media\&token=5c727f45-7375-4197-8ede-9917c4ced5ed)

Clicking on "**Next: Permissions**", we arrive at this screen where we click the "**Attach existing policies directly**" box, and we check the :white\_check\_mark: mark on the **AdministratorAccess** listed policy :

![](https://681104499-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LhjKavWMofrik61tHfB%2F-LjAXtKKiw4dOo71O3To%2F-LjAy-Kr-i3M3sQRd74C%2Fimage.png?alt=media\&token=918cf2cf-705a-465e-bb38-8de6c6102331)

Let's go on with "**Next: Tags**". I don't use tags here, so I click "**Next: Review**" :

![](https://681104499-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LhjKavWMofrik61tHfB%2F-LjAXtKKiw4dOo71O3To%2F-LjAys6GR0WxQxy4yJLX%2Fimage.png?alt=media\&token=40a0dc85-5cdc-45cb-a5b1-61ed3e4a1ebf)

Here I check the details are what I want and click "**Create user**"...

![Newly created administrator IAM User](https://681104499-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LhjKavWMofrik61tHfB%2F-LllH3h9xsycemYwJWS5%2F-LllI2YUvr_tpbUITCy4%2Fimage.png?alt=media\&token=197a8541-476e-427e-ab6d-436b59e5325a)

Now I **download** the (ugly) **credentials.csv** file for reference (it contains the password and the programmatic Access "Key ID" + "Secret Key") **before clicking "Close" !**



### Adding / Removing access methods :&#x20;

You can **edit existing IAM Users** to add / remove / edit /renew access methods : console access with password, programmatic access key, etc...

