# Create an AWS IAM User ## Metadata **Status**:: #x **Zettel**:: #zettel/fleeting **Created**:: [[2023-02-17]] ## Synopsis It's recommended to create [IAM users](https://us-east-1.console.aws.amazon.com/iamv2/home#/home) with limited policies and user the access keys from IAM users instead of the root user. ## Policies Use the wizard "Add inline policy" in the AWS Console to add policies. ### S3 Backup Allow only the `PutObject` action. ```json { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "s3:PutObject", "Resource": "arn:aws:s3:::contabo/*" } ] } ```