Creating IAM User:

Creating an IAM user instead of directly using the root user enhances security by adhering to the principle of least privilege. IAM users allow you to assign specific permissions needed for tasks, reducing the risk associated with using the powerful and all-encompassing root user credentials. This practice improves access control, traceability, and overall security posture within AWS services

STEP are as follows:

1. Search for IAM user in the search bar. And Click the IAM service.

2. Click on the Add MFA visble on the screen.

3. 

   Give your device name e.g. myphone and select the Authenticator app option.

4. Open the APP and click on the plus button on the app.

5. Scan the QR and enter the two MFA codes consecutively refresh after 30 seconds each.

6. Now go to Users (it is present in the sidebar) and creat IAM user by clicking Create User.

7. 

   Set the below details as shown.

8. 

   Click on the required fields to set permission for IAM User. And Click Next

9. 

   Click next again and the click on create user. Now download the .csv file shown in the page.

10. This .csv file contains username and password to login in to the Console sign-in URL option shown in the page. Now click on Return to users list.

11. Let's setup MFA for the above user we had created. Click on itadmin (The user we just created).

12. Click on security credentials and the click on Assign MFA device.

13. And follow the same process we did for the root user.

Let's Login through IAM User:

1. Go to IAM service and click on dashboard.

2. In the right side click on create alias. Give a alias name and click on create alias.

3. Now copy the url sign-in url below. And sign in with credentials present in the .csv file.

4. So now you are logged in with itadmin.

Now you can explore the option for the itadmin user.

Let's Setup the Billing Alarm:

Setting up a billing alarm is crucial for cost management in AWS. It helps you monitor your usage, avoid unexpected charges, and ensures that you stay within budget constraints. This step is fundamental to maintaining financial control and optimizing your AWS resources. We will using cloudwatch service for it.

Steps are as follow's:

1. Click on your username and select Billing and Cost Management.

2. 

   In the sidebar click on Billing preferences.

3. 

   Click on Edit option in Invoice delivery preferences. And checkmark the field and click update

4. Click Edit on Alert preferences and select the below option and click update.

5. 

   Now in the search bar search for an service called CloudWatch.

6. In the sidebar click on All alarms and then click on Create Alarm.

7. Click on Select Metric on what you want set the alarm.

8. Click on Billing -> Total Estimated Charge. Select the currency USD. And Click on Select Mertric.

9. 

   Give the threshold value up to which you want set. And then click on Next.

10. Click on Create Topic, give topic name and email address. And then click on Create Topic and then click on Next.

11. 

    Enter name and description of message and click Next. And then click on Create Alarm.

12. Confirm the subscription which is sent to your email.

13. Now you set your billing alarm.

Create a Certificate:

We will be generating a secure certificate using AWS Certificate Manager service, enhancing the security and trustworthiness of our system.

NOTE: This part is required only if you have purchased a domain otherwise you can skip this part.

Steps are as follow's:

1. Search for Certificate Manager in the AWS search bar and click on the service.

2. Click on the Request a Certificate button.

3. And then click on request a public certificate and click next.

4. Go to tags set key as Name and value as your domain name e.g. example.xyz

5. Refresh and click on the id.

6. In the domains part you will see cname and cname value. Copy the value and add it to record in your domain registrar.

   

7. If the status shows issued then validation is completed.

So that's how add certification to your website.

Conclusion:

In this comprehensive guide, we've covered the essential steps for securing and optimizing your AWS environment. From creating a dedicated IAM user for enhanced security to setting up a billing alarm for financial control and ensuring trust with SSL certificates for your website. Empower your AWS journey with these foundational practices.