How Do I Create an AK/SK Pair for an IAM User?

Scenarios

Procedure

1. Create a user group and assign permissions to it.
   • If the IAM users who will be added to this group need all SMS permissions, attach the system-defined policies supported by SMS, including SMS FullAccess, OBS OperateAccess, ECS FullAccess, and VPC FullAccess, to the group.
   • If the IAM user only needs specific SMS permissions, create custom policies and attach these policies to the user group. For details, see SMS Custom Policies.
     Note

     Compared with system-defined policies, custom policies provide more fine-grained and secure permissions control.

2. Create an IAM user and add it to the user group.

   Create a user on the IAM console and add the user to the group created in 1.

3. Log in to the management console as the IAM user. Create an AK/SK pair by referring to Access Keys.