# Create an AWS IAM User
## Metadata
**Status**:: #x
**Zettel**:: #zettel/fleeting
**Created**:: [[2023-02-17]]
## Synopsis
It's recommended to create [IAM users](https://us-east-1.console.aws.amazon.com/iamv2/home#/home) with limited policies and user the access keys from IAM users instead of the root user.
## Policies
Use the wizard "Add inline policy" in the AWS Console to add policies.
### S3 Backup
Allow only the `PutObject` action.
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::contabo/*"
}
]
}
```