Test policy effectiveness

Test policy effectiveness by creating an EC2 instance in the allowed Region

1. Click on the name of the currently logged-in user.
   • Click Sign out.

2. Click Sign in to console

3. At IAM user name enter the user we created (testuser).
   • At Password enter the password we set (123456Aa@).
   • Click Sign in.

5. Click on the Region menu next to the logged-in user’s name.
   • Click on the Region where we allowed operations for testuser in the RegionRestrict policy.

6. Click on the search box, click EC2 to go to the EC2 service management console.

7. Click Launch instance.

8. At Name enter testserver

9. At Key pair name, click on the Select box.
   • Select Proceed without a key pair (Not recommended)

10. Click Launch Instance.

In this step, we have successfully created an EC2 instance with the instance type t3.micro in the Singapore Region. Next we will try switching to another Region to test whether we have permission to create servers in another Region.

Try creating a server in another Region

1. Click on the Region menu next to the logged-in user’s name.
   • Click on a Region different from the Region where we allowed operations for testuser in the RegionRestrict policy.

2. Try the operations of setting Key pair or instance type.
   • You will see that you do not have permission to create an EC2 instance in this Region.

3. Return to the initial Region before proceeding to the next step.

Delete the created testserver

1. Verify you are in the correct initial Region.
   • Click Instances.

2. In the list of EC2 instances.
   • Click on testserver.

3. Click Instance state.
   • Click Terminate instance to proceed with deleting the testserver virtual server.

4. Click Terminate to confirm.
5. Ensure you delete the instance successfully to avoid unexpected costs.

In this step, we have successfully created an EC2 instance with the instance type t3.micro in the Singapore Region. In the next section, we will try to restrict the creation of a specified instance type.