In this video, we are going to talk about security, best practices of 8 seconds.
We will see the way of improving the security of your account.
As you know that in the last video we have activated our Willis filter account and log into a management
console.
So Ada has two main user type one log in the A management console you can see in this picture.
Also the first one is the A list root user account and the second one is the A Willis Iam user account.
I am stands for the Identity and Access Management.
And as the name suggests, it is managing identity and access of the resources.
Look, let me explain one by one these user accounts.
The first one is the root user account.
As you guessed that a root user account is the only one user that has full powerful of your account
and it has unrestricted access over your aid account.
So that means it is really, really dangerous to use this root account for daily usage of your cloud
infrastructure because it has powerful of everything on your aid list environment.
So the second one is the IAM user account.
Iam is identity and access management and you can think this is a sub user's under the root user account
and you can define policies over this account and able to restrict over your a closed account.
So that means I am a user account can create and restrict by a root user accounts and this is the best
practice when you are using the alias, creating iam user and configuring for the programmatic is the
best practice.
Let me explain better way.
So this is the best practice to follow when you first activate your account is you know that we have
just activated a split account and after activate our account we have got only an A root user account,
right?
So this is the first thing we should do when creating IAM user on the root account and use this IAM
user for our daily usage of a management console.
Even you have the only one user to use this account.
Creating a dedicated user account is one of the first thing we should do after activated our account.
This is the best practice security, best practice that we should follow.
So that means we should create user specific IAM accounts under the root user account that they have
own login and password information because root contains power of full access that can change your payment
information, changing your password, removing users and lots of dangerous things.
So the important to security best practice is creating IAM user account under your root user account.
So when creating user specific account, we should define programmatic and console access.
Also, programmatic access is required for our course because we will use all interactions with a resources
like a management console.
A CDK and SDHC will be required to programmatic access in order to interrupt existing resources.
So it is important to creating a new IAM user and configure for the programmatic and console access.
So we will create a we will follow this security based practice and create an IAM user account and configure
for the programmatic and console access.
But let me show you how we can do that.
If you open the signing console page, let me open it.
Yes, you can see in here we have two options, right.
We can log in with the root user account and log in with the user account.
And as you said that I am stands for the identity and access management and as the name suggests, it
is managing identity and access of resources.
So in the next video, we are going to create our IAM user and give required permissions and login with
the IAM user because it is a security based practice.
But before that, I would like to share you other security best practices that you should also follow
and consider about the accounts.
As you know that we have followed these steps in this page, we have followed this step one, we are
create and activate our liquidity account.
And at the end of this page you can see the part of the yes, improving the security of the account
and you can see the security best practices in the willis iam.
So if you click this link you can see the lots of security best practices that we can follow.
It is basically to help secure your account and if you go this link you can see the all security best
practices in IAM.
In this page you can see lots of security best practices.
That's very important to follow of our accounts.
For example, you can see the topics in here lock away your place account root user access keys, grant
list privileges, get started using permissions with the wealth management policies that we are that
we will do in the next video.
And you can see lots of security practices, best practices like use access levels, review permissions,
enable multi-factor authentication and remove unnecessary credentials, use policy conditions and so
on.
So.
But for our course, it is enough to create a user and give required permission under the root user
account.
So we will create and follow these best practices.
In the next video.
We will create a user and configure for the programmatic answers for and console access.