Assign policy to group

Assign policy to group CostTest

  1. After creating the policy successfully. In the left-hand menu, click User groups.
    • Click on CostTest group.

CostGovernance

  1. On the group page CostTest.

    • Click the Permissions tab.
    • Click Add permissions.
    • Click Attach policies.

  2. In the Filter box, click Type.

CostGovernance

  1. Click Type: Customer managed.

CostGovernance

Customer managed are the IAM Policies we create and manage ourselves.

  1. Click the Filter box, enter the name of the policy we created in the previous step ( EC2_FamilyRestrict ).

    • Press the Enter key.

  2. Click the checkbox next to EC2_FamilyRestrict policy.

    • Click Add permissions.

CostGovernance

  1. Make sure the policy is successfully assigned.

CostGovernance

  1. Click RegionRestrict policy.
    • Click Remove.

CostGovernance

We need to remove the RegionRestrict policy because this policy provides full permissions on the EC2 service.

Next step, we will log in with user testuser to check if we can create an EC2 server with a family other than T3.