Attaching a policy to an IAM user group - Amazon Identity and Access Management
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Attaching a policy to an IAM user group

You can attach an Amazon managed policy—that is, a prewritten policy provided by Amazon—to a user group, as explained in the following steps. To attach a customer managed policy—that is, a policy with custom permissions that you create—you must first create the policy. For information about creating customer managed policies, see Creating IAM policies.

For more information about permissions and policies, see Access management for Amazon resources.

To attach a policy to a user group (console)

  1. Sign in to the Amazon Web Services Management Console and open the IAM console at https://console.amazonaws.cn/iam/.

  2. In the navigation pane, choose User groups and then choose the name of the group.

  3. Choose the Permissions tab.

  4. Choose Add permissions and then choose Attach policies.

  5. The current policies attached to the user group are displayed in the Current permissions policies list. In the list of Other permissions policies, select the check box next to the names of the policies to attach. You can use the search box to filter the list of policies by type and policy name.

  6. Select the policy you want to attach to your IAM user group and choose Attach policies.

To attach a policy to a user group (Amazon CLI or Amazon API)

Do either of the following: