Managing Groups

To group the users together in pools that can be managed as one object, we use groups in AWS. We have the ability to create up to 300 groups in IAM in our AWS account. Let's go back to the management console and click on Groups in IAM:

Now, open the Administrators group by clicking on its Group Name. You are presented with the Access Advisor tab where you can quickly see what kinds of permissions have been assigned to this group. You can see the AdministratorAccess policy is granting access to all of the AWS services. We will be looking at this policy in the Managing Policies and Assigning Permissions section of this chapter:

By clicking on the Permissions and Users tabs, we can assign other policies defining other permissions to the group and add or remove users from the group.