<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Ikenna Iheanaetu</title>
    <description>The latest articles on Forem by Ikenna Iheanaetu (@tonysteel).</description>
    <link>https://forem.com/tonysteel</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F2813144%2F862f47e6-6aeb-4139-9dc7-b30d1dc0cd95.png</url>
      <title>Forem: Ikenna Iheanaetu</title>
      <link>https://forem.com/tonysteel</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/tonysteel"/>
    <language>en</language>
    <item>
      <title>The Hidden Cost of "Free" AI: The Question Nobody's Asking</title>
      <dc:creator>Ikenna Iheanaetu</dc:creator>
      <pubDate>Wed, 20 Aug 2025 07:28:27 +0000</pubDate>
      <link>https://forem.com/tonysteel/the-hidden-cost-of-free-ai-the-question-nobodys-asking-4f9j</link>
      <guid>https://forem.com/tonysteel/the-hidden-cost-of-free-ai-the-question-nobodys-asking-4f9j</guid>
      <description>&lt;p&gt;Everyone in tech loves AI right now. ChatGPT, Claude, Copilot we're all using these tools daily, and honestly, they're incredible. But here's something that going on, and I'm surprised more people aren't talking about it:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Why the hell is this stuff free?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;I know, I know. It sounds like a dumb question. "Free" tech is great, right? But hear me out, because I think we're missing something huge here.&lt;/p&gt;

&lt;h2&gt;
  
  
  Nothing Is Ever Actually Free
&lt;/h2&gt;

&lt;p&gt;Look, I've been around tech long enough to know this basic rule: &lt;strong&gt;you're either paying directly, or you're paying some other way.&lt;/strong&gt; There's no magical land where billion-dollar companies just give away their most expensive products out of the goodness of their hearts.&lt;/p&gt;

&lt;p&gt;With most "free" tech, we pay through what economists call opportunity cost, basically, what we give up to use it.&lt;/p&gt;

&lt;p&gt;Think about it:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Personal computers&lt;/strong&gt; made us incredibly productive, but how many people under 30 can read an analog clock? We traded that skill for digital convenience.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Smartphones&lt;/strong&gt; gave us instant everything, but nobody memorizes phone numbers anymore. When was the last time you navigated somewhere without GPS?&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Dating apps&lt;/strong&gt; connected us during the pandemic, but they also fundamentally changed how humans form relationships. And guess what? We became the product being sold.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;See the pattern?&lt;/p&gt;

&lt;h2&gt;
  
  
  The Google Reality Check
&lt;/h2&gt;

&lt;p&gt;Here's my favorite example. Google employs hundreds of thousands of people worldwide. They run massive data centers. They maintain offices in every major city. All so you can... search for free? &lt;/p&gt;

&lt;p&gt;Come on.&lt;/p&gt;

&lt;p&gt;Google's real business model is simple:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Your attention&lt;/strong&gt; → billions in advertising revenue&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Your data&lt;/strong&gt; → sold to companies you've never heard of
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Your behavior patterns&lt;/strong&gt; → used for way more than just "improving search"&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Gmail isn't free. Search isn't free. YouTube isn't free. &lt;strong&gt;You're&lt;/strong&gt; the product being sold.&lt;/p&gt;

&lt;h2&gt;
  
  
  So What About AI?
&lt;/h2&gt;

&lt;p&gt;This brings us to the elephant in the room. ChatGPT, Claude, and Gemini represent the most sophisticated technologies ever created. The computational power behind a single ChatGPT conversation costs more than most people's monthly salary. The research that built these systems took decades and billions in investment.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;So why are they giving it away?&lt;/strong&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  Meet AMECA (This Blew My Mind)
&lt;/h2&gt;

&lt;p&gt;I stumbled across something recently that connected all the dots. There's a company called Engineered Arts that makes humanoid robots. Their flagship robot, AMECA, is genuinely terrifying and amazing:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;It walks and talks naturally&lt;/li&gt;
&lt;li&gt;Makes realistic facial expressions
&lt;/li&gt;
&lt;li&gt;Holds conversations and shows emotions&lt;/li&gt;
&lt;li&gt;Responds to situations like a human would&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;And here's the kicker: &lt;strong&gt;AMECA is powered by ChatGPT and similar AI systems.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Suddenly, the "free" AI makes perfect sense.&lt;/p&gt;

&lt;h2&gt;
  
  
  We're Training Our Own Replacements
&lt;/h2&gt;

&lt;p&gt;Every conversation you have with ChatGPT teaches it human reasoning patterns. Every coding question you ask shows it how developers think. Every debugging session feeds it data about how we solve problems.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;We're not just using a helpful tool we're creating the training data for systems designed to replace us.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Think about what you've asked AI lately:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;"Help me debug this code"&lt;/li&gt;
&lt;li&gt;"Explain this algorithm" &lt;/li&gt;
&lt;li&gt;"Write a function that does X"&lt;/li&gt;
&lt;li&gt;"Review my code for issues"&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Each interaction is a lesson in "how humans approach software development." Multiply that by millions of developers worldwide, and you've got the most comprehensive dataset on human problem-solving ever assembled.&lt;/p&gt;

&lt;h2&gt;
  
  
  What I'm Seeing in Practice
&lt;/h2&gt;

&lt;p&gt;I've been watching how teams use AI tools, and honestly, it's concerning:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Dependency is growing fast.&lt;/strong&gt; When ChatGPT was down last month, productivity crashed because people had forgotten how to debug without it.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Core skills are eroding.&lt;/strong&gt; Developers who used to think through problems step-by-step now immediately reach for AI assistance.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Nobody questions the business model.&lt;/strong&gt; Everyone just assumes it's a free productivity boost.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The scariest part? Most people don't even realize they're becoming dependent.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Three Levels of Cost
&lt;/h2&gt;

&lt;p&gt;This "free" AI is actually costing us on multiple levels:&lt;/p&gt;

&lt;h3&gt;
  
  
  Personal Level
&lt;/h3&gt;

&lt;p&gt;We're losing critical thinking skills, problem-solving creativity, and deep technical knowledge. Why struggle through a complex algorithm when AI can just give you the answer?&lt;/p&gt;

&lt;h3&gt;
  
  
  Professional Level
&lt;/h3&gt;

&lt;p&gt;If AI can do your job, what's your unique value proposition? We're literally training the systems that will make us redundant.&lt;/p&gt;

&lt;h3&gt;
  
  
  Societal Level
&lt;/h3&gt;

&lt;p&gt;We're creating a world where human agency is diminished, employment landscapes shift dramatically, and authentic human creativity becomes rare.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Master Plan (As I See It)
&lt;/h2&gt;

&lt;p&gt;Here's what I think is really happening:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Phase 1 (Now):&lt;/strong&gt; Give AI away "free" to collect human interaction data on a massive scale&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Phase 2 (Soon):&lt;/strong&gt; Use that data to create sophisticated humanoid robots and automation systems
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Phase 3 (Coming):&lt;/strong&gt; Deploy those systems to replace human workers across industries&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;We're funding our own replacement through our data and attention.&lt;/p&gt;

&lt;h2&gt;
  
  
  What We Should Actually Do
&lt;/h2&gt;

&lt;p&gt;I'm not saying don't use AI – it's genuinely helpful. But maybe we should:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Use it consciously, not reflexively.&lt;/strong&gt; Ask yourself why you're reaching for AI instead of thinking through the problem first.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Maintain your core skills.&lt;/strong&gt; Don't let AI become a crutch for fundamental development abilities.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Question the business model.&lt;/strong&gt; When something seems too good to be true, it probably is.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Focus on uniquely human skills&lt;/strong&gt; – creativity, critical thinking, emotional intelligence, complex problem-solving.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  The Question That Keeps Me Up
&lt;/h2&gt;

&lt;p&gt;Are we okay with unknowingly participating in building our own replacement?&lt;/p&gt;

&lt;p&gt;Next time you open ChatGPT, just remember: you're not just the customer, you're the product. Your conversations are training data. The "free" period is an investment in collecting human intelligence.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The bill will come due eventually.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;And it might be higher than we think.&lt;/p&gt;




&lt;p&gt;&lt;em&gt;What do you think? Am I being paranoid, or are we sleepwalking into something we should be more concerned about? Let me know in the comments, I'd love to hear other perspectives on this.&lt;/em&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>chatgpt</category>
      <category>tech</category>
      <category>career</category>
    </item>
    <item>
      <title>AWS IAM for Beginners: Understanding Roles</title>
      <dc:creator>Ikenna Iheanaetu</dc:creator>
      <pubDate>Thu, 17 Apr 2025 18:32:31 +0000</pubDate>
      <link>https://forem.com/tonysteel/aws-iam-for-beginners-understanding-roles-28hp</link>
      <guid>https://forem.com/tonysteel/aws-iam-for-beginners-understanding-roles-28hp</guid>
      <description>&lt;h2&gt;
  
  
  IAM Roles — Another "Who" in the IAM Family
&lt;/h2&gt;

&lt;p&gt;If you check the AWS docs, they say:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;“An IAM role is similar to an IAM user in that it is an AWS identity with permission policies that determine what the identity can and cannot do. However, instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it.”&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Yeah… not exactly clear at first glance.&lt;/p&gt;

&lt;p&gt;Let me break it down with an example.&lt;/p&gt;




&lt;h2&gt;
  
  
  🧵 The Real-World Use Case
&lt;/h2&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fwtsemtrjv5tus21aay4w.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fwtsemtrjv5tus21aay4w.png" alt="AWS EC2, S3 and Cloudwatch Example in my AWS IAM for Beginners: Understanding Roles" width="800" height="354"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Let’s say you want to host an application on &lt;strong&gt;EC2&lt;/strong&gt;, and that app needs to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Store and retrieve files in &lt;strong&gt;S3&lt;/strong&gt;
&lt;/li&gt;
&lt;li&gt;Publish logs to &lt;strong&gt;CloudWatch&lt;/strong&gt;
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;You’ve got a few ways to do this.&lt;/p&gt;




&lt;h2&gt;
  
  
  ❌ Option 1: Use an IAM User
&lt;/h2&gt;

&lt;p&gt;You could:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Create an &lt;strong&gt;IAM user&lt;/strong&gt;
&lt;/li&gt;
&lt;li&gt;Attach the necessary permissions (S3 and CloudWatch access)&lt;/li&gt;
&lt;li&gt;Hardcode the credentials into your application&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Or store those credentials somewhere in the EC2 file system and read them at runtime.&lt;/p&gt;

&lt;p&gt;Sounds doable, right?&lt;/p&gt;

&lt;p&gt;🚨 Don’t do this. It’s a &lt;strong&gt;bad idea&lt;/strong&gt;. Hardcoding credentials is a massive security risk, and storing them locally isn’t any better.&lt;/p&gt;




&lt;h2&gt;
  
  
  ✅ The Right Way: Use an IAM Role
&lt;/h2&gt;

&lt;p&gt;A better approach is to:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Create an IAM role&lt;/strong&gt; with the exact permissions your app needs (e.g., S3 and CloudWatch access)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Attach that role to the EC2 instance&lt;/strong&gt; when launching it&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;AWS will automatically provide your instance with &lt;strong&gt;temporary, secure credentials&lt;/strong&gt; using that role.&lt;/p&gt;

&lt;p&gt;No manual keys, no risk of accidental leaks. This is the &lt;strong&gt;recommended and secure&lt;/strong&gt; way to give AWS services access to other AWS services.&lt;/p&gt;




&lt;h2&gt;
  
  
  🎯 Creating a Role — Step by Step
&lt;/h2&gt;

&lt;ol&gt;
&lt;li&gt;Go to the &lt;strong&gt;IAM dashboard&lt;/strong&gt;
&lt;/li&gt;
&lt;li&gt;Select &lt;strong&gt;Roles&lt;/strong&gt; from the sidebar&lt;/li&gt;
&lt;li&gt;Click &lt;strong&gt;Create role&lt;/strong&gt;
&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;You’ll be asked to choose a &lt;strong&gt;trusted entity type&lt;/strong&gt;, which just means:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;“Who or what will use this role?”&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Some options include:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;AWS service (e.g., EC2, Lambda)&lt;/li&gt;
&lt;li&gt;Another AWS account&lt;/li&gt;
&lt;li&gt;Web identity or SAML provider&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Once selected:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Attach the required &lt;strong&gt;policies&lt;/strong&gt; (permissions)&lt;/li&gt;
&lt;li&gt;Name the role and create it&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Done.&lt;/p&gt;




&lt;h2&gt;
  
  
  🧠 Quick Recap
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Users&lt;/strong&gt; are actual people (with passwords, keys, etc.)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;User Groups&lt;/strong&gt; are collections of users&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Roles&lt;/strong&gt; are &lt;strong&gt;assignable identities&lt;/strong&gt; with temporary credentials, ideal for services like EC2, Lambda, or even federated users&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;They’re all part of the &lt;strong&gt;"who"&lt;/strong&gt; that can access your AWS resources.&lt;/p&gt;




&lt;h2&gt;
  
  
  📌 Up Next: IAM Policies
&lt;/h2&gt;

&lt;p&gt;Now that we’ve covered the &lt;strong&gt;who&lt;/strong&gt;, next up is the &lt;strong&gt;what&lt;/strong&gt; — as in, &lt;em&gt;what can they do?&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;In the next blog post, we’ll dive deep into &lt;strong&gt;IAM Policies&lt;/strong&gt; — how to write them, use them, and avoid common pitfalls.&lt;/p&gt;




&lt;p&gt;📚 &lt;strong&gt;Missed a post in the series?&lt;/strong&gt;&lt;br&gt;&lt;br&gt;
Catch up here:&lt;br&gt;&lt;br&gt;
➡️ &lt;a href="https://dev.to/tonysteel/getting-started-with-aws-iam-understanding-users-2373"&gt;Understanding IAM Users&lt;/a&gt;&lt;br&gt;&lt;br&gt;
➡️ &lt;a href="https://dev.to/tonysteel/aws-iam-for-beginners-understanding-user-groups-1g08"&gt;Understanding IAM User Groups&lt;/a&gt;&lt;/p&gt;




&lt;p&gt;🔔 &lt;strong&gt;Follow me&lt;/strong&gt; for more beginner-friendly AWS and cloud content!&lt;/p&gt;

</description>
      <category>aws</category>
      <category>cloud</category>
      <category>iam</category>
      <category>devops</category>
    </item>
    <item>
      <title>AWS IAM for Beginners: Understanding User Groups</title>
      <dc:creator>Ikenna Iheanaetu</dc:creator>
      <pubDate>Sun, 13 Apr 2025 23:36:24 +0000</pubDate>
      <link>https://forem.com/tonysteel/aws-iam-for-beginners-understanding-user-groups-1g08</link>
      <guid>https://forem.com/tonysteel/aws-iam-for-beginners-understanding-user-groups-1g08</guid>
      <description>&lt;p&gt;In the &lt;a href="https://dev.to/tonysteel/getting-started-with-aws-iam-understanding-users-2373"&gt;first post of this IAM beginner series&lt;/a&gt;, I walked through &lt;strong&gt;IAM Users&lt;/strong&gt; how to create one and why you shouldn’t rely on your root account for daily AWS tasks.&lt;/p&gt;

&lt;p&gt;Now, we're building on that foundation with something more scalable and practical: &lt;strong&gt;User Groups&lt;/strong&gt;.&lt;/p&gt;




&lt;h2&gt;
  
  
  What Are IAM User Groups?
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;User groups&lt;/strong&gt; are collections of users that share the same permissions. Instead of assigning permissions one-by-one to each user, you attach a policy to the group, and every user in that group inherits it.&lt;/p&gt;

&lt;p&gt;This simplifies access management especially in large teams or fast-growing projects.&lt;/p&gt;




&lt;h2&gt;
  
  
  How to Create a User Group in AWS
&lt;/h2&gt;

&lt;ol&gt;
&lt;li&gt;Log in to the AWS console.&lt;/li&gt;
&lt;li&gt;Navigate to the IAM service.&lt;/li&gt;
&lt;li&gt;On the sidebar under &lt;strong&gt;Access Management&lt;/strong&gt;, click &lt;strong&gt;User groups&lt;/strong&gt;.&lt;/li&gt;
&lt;li&gt;Click the &lt;strong&gt;Create group&lt;/strong&gt; button.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fpukxfy2uyeie8ecidvbd.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fpukxfy2uyeie8ecidvbd.png" alt="AWS Console image of user groups" width="800" height="459"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Give your group a name, like &lt;code&gt;Admins&lt;/code&gt;, &lt;code&gt;Developers&lt;/code&gt;, or &lt;code&gt;Testers&lt;/code&gt;.&lt;/li&gt;
&lt;li&gt;You can optionally add users to the group at this stage.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;And you’re done!&lt;/p&gt;




&lt;h2&gt;
  
  
  Real-World Examples of User Groups
&lt;/h2&gt;

&lt;p&gt;Let’s say you're working on a production application with different teams. Here's how you might use groups:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;🛠 &lt;strong&gt;Admins&lt;/strong&gt;: Full control over all AWS resources. Attach policies like &lt;code&gt;AdministratorAccess&lt;/code&gt;.
&lt;/li&gt;
&lt;li&gt;👨‍💻 &lt;strong&gt;Developers&lt;/strong&gt;: Need access to deploy apps using services like EC2, Lambda, and S3, but don’t need full account control.
&lt;/li&gt;
&lt;li&gt;🧪 &lt;strong&gt;Testers&lt;/strong&gt;: Might need read-only access to logs and certain data buckets to verify app behavior.
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;By using groups, you avoid assigning policies individually and reduce the risk of misconfiguration.&lt;/p&gt;




&lt;h2&gt;
  
  
  Why This Matters
&lt;/h2&gt;

&lt;p&gt;This becomes especially useful when onboarding new team members. Instead of manually figuring out permissions every time, just add them to the relevant group, and they’re ready to go.&lt;/p&gt;

&lt;p&gt;It also makes offboarding safer—remove someone from a group and they instantly lose access to associated resources.&lt;/p&gt;




&lt;h2&gt;
  
  
  What’s Next?
&lt;/h2&gt;

&lt;p&gt;Next up, we’ll cover &lt;strong&gt;IAM Roles&lt;/strong&gt;—one of the most misunderstood but powerful parts of IAM.&lt;/p&gt;

&lt;p&gt;Here it is &lt;a href="https://dev.to/tonysteel/aws-iam-for-beginners-understanding-roles-28hp"&gt;Understanding IAM Roles&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Roles are what services and other AWS accounts use to assume access without storing long-term credentials.&lt;br&gt;&lt;br&gt;
We'll explore when to use them, how they're different from users, and practical examples for real projects.&lt;/p&gt;




&lt;h2&gt;
  
  
  Conclusion
&lt;/h2&gt;

&lt;p&gt;User groups are a foundational part of any secure and scalable IAM setup.&lt;br&gt;&lt;br&gt;
They help enforce the principle of least privilege, reduce human error, and make permission management &lt;strong&gt;way&lt;/strong&gt; easier as your cloud usage grows.&lt;/p&gt;

&lt;p&gt;Don’t wait until your IAM dashboard is a mess to start organizing users properly. Start now. Start simple.&lt;/p&gt;




&lt;p&gt;✍️ If this post helped you, drop a comment or share it with someone new to AWS.&lt;/p&gt;

&lt;p&gt;🔗 &lt;a href="https://dev.to/tonysteel/getting-started-with-aws-iam-understanding-users-2373"&gt;Catch up on Part 1: IAM Users&lt;/a&gt;&lt;br&gt;&lt;br&gt;
🛡️ Part 3 on &lt;strong&gt;IAM Roles&lt;/strong&gt; is coming soon.&lt;/p&gt;




&lt;h1&gt;
  
  
  aws #iam #cloudsecurity #devops #awscommunity #awstips #infosec #cybersecurity #cloudcomputing #securitybestpractices
&lt;/h1&gt;

</description>
      <category>aws</category>
      <category>iam</category>
      <category>cloud</category>
      <category>security</category>
    </item>
    <item>
      <title>Getting Started with AWS IAM: Understanding Users</title>
      <dc:creator>Ikenna Iheanaetu</dc:creator>
      <pubDate>Wed, 09 Apr 2025 21:14:26 +0000</pubDate>
      <link>https://forem.com/tonysteel/getting-started-with-aws-iam-understanding-users-2373</link>
      <guid>https://forem.com/tonysteel/getting-started-with-aws-iam-understanding-users-2373</guid>
      <description>&lt;p&gt;When I first started using AWS, I logged in with my root account and built everything from there. It worked—until I needed to collaborate with someone and realized they couldn't access my AWS resources. That’s when I learned about &lt;strong&gt;IAM&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;A friend recently asked me about IAM because he's new to AWS. I explained what I could, then figured—why not write it down and help more people? This blog is what I wish I had when I started out.&lt;/p&gt;

&lt;p&gt;This is part of a beginner-friendly IAM series:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Users ← &lt;strong&gt;(this post)&lt;/strong&gt;
&lt;/li&gt;
&lt;li&gt;Groups&lt;/li&gt;
&lt;li&gt;Roles&lt;/li&gt;
&lt;li&gt;Policies
&lt;/li&gt;
&lt;li&gt;Final: Putting it all together&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Let’s start with &lt;strong&gt;IAM Users&lt;/strong&gt;.&lt;/p&gt;




&lt;h2&gt;
  
  
  What is IAM?
&lt;/h2&gt;

&lt;p&gt;IAM stands for &lt;strong&gt;Identity and Access Management&lt;/strong&gt;. It’s the AWS service that helps you manage:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Authentication&lt;/strong&gt;: Who can access your AWS resources
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Authorization&lt;/strong&gt;: What actions they can perform&lt;/li&gt;
&lt;/ul&gt;




&lt;h2&gt;
  
  
  What’s an IAM User?
&lt;/h2&gt;

&lt;p&gt;An &lt;strong&gt;IAM user&lt;/strong&gt; is an identity you create in your AWS account to represent a person or application that interacts with AWS services.&lt;/p&gt;

&lt;p&gt;Each user:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Has a name&lt;/li&gt;
&lt;li&gt;Can have credentials (passwords, access keys)&lt;/li&gt;
&lt;li&gt;Can be given permissions (via policies)&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;By default, new IAM users have &lt;strong&gt;no access&lt;/strong&gt; to anything. You decide what access they get.&lt;/p&gt;




&lt;h2&gt;
  
  
  Creating Your First IAM User
&lt;/h2&gt;

&lt;p&gt;Let’s walk through creating an IAM user from the AWS Console.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. Log in to AWS
&lt;/h3&gt;

&lt;h3&gt;
  
  
  2. Go to the IAM Dashboard
&lt;/h3&gt;

&lt;p&gt;From the sidebar, under &lt;strong&gt;Access management&lt;/strong&gt;, click on &lt;strong&gt;Users&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Ff87xc97elxo5n126kbft.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Ff87xc97elxo5n126kbft.png" alt="Image description" width="800" height="375"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  3. Click “Create users”
&lt;/h3&gt;

&lt;p&gt;You'll see a button to create a user.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F58usypb75eus69t2ogtu.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F58usypb75eus69t2ogtu.png" alt="Image description" width="800" height="83"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  4. Set a username
&lt;/h3&gt;

&lt;p&gt;Enter a name for the user (e.g., &lt;code&gt;test-user&lt;/code&gt;).&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fw898wqx4wk3duv8dbtow.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fw898wqx4wk3duv8dbtow.png" alt="Image description" width="800" height="373"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  5. Skip group assignment
&lt;/h3&gt;

&lt;p&gt;IAM groups come next in the series, so skip this step and click &lt;strong&gt;Next&lt;/strong&gt;.&lt;/p&gt;

&lt;h3&gt;
  
  
  6. Review and create the user
&lt;/h3&gt;

&lt;p&gt;Check your input and click &lt;strong&gt;Create user&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;After the user is created, click on their name to view their details.&lt;br&gt;&lt;br&gt;
Go to the &lt;strong&gt;Security credentials&lt;/strong&gt; tab.&lt;/p&gt;

&lt;p&gt;Enable &lt;strong&gt;Console access&lt;/strong&gt; so the user can log in via the web.&lt;/p&gt;

&lt;p&gt;You can:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Let AWS generate a password
&lt;/li&gt;
&lt;li&gt;Or create your own&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Download the credentials file (CSV). It contains the username, password, and login link.&lt;/p&gt;




&lt;h2&gt;
  
  
  Recap
&lt;/h2&gt;

&lt;p&gt;You’ve just created your first IAM user—a key step toward building more secure and scalable AWS projects. IAM might seem like a small detail at first, but it becomes critical as your infrastructure grows or your team expands.&lt;/p&gt;

&lt;p&gt;Start small. Avoid using the root account. Create IAM users with just the right permissions. That’s how you build good habits early.&lt;/p&gt;

&lt;p&gt;In the next post, we’ll explore IAM groups—how they help you manage permissions for multiple users at once and make your setup easier to maintain.&lt;/p&gt;

&lt;p&gt;If this helped you, consider bookmarking it for later or sharing it with a friend who’s also getting into AWS.&lt;/p&gt;




&lt;h2&gt;
  
  
  Next in the series
&lt;/h2&gt;

&lt;p&gt;🛠️ &lt;strong&gt;IAM Groups – &lt;a href="https://dev.to/tonysteel/aws-iam-for-beginners-understanding-user-groups-1g08"&gt;Read part 2&lt;/a&gt;&lt;/strong&gt;&lt;br&gt;&lt;br&gt;
In the next post, we’ll cover:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;What groups are&lt;/li&gt;
&lt;li&gt;Real examples of group usage&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Stay tuned.&lt;/p&gt;




</description>
      <category>aws</category>
      <category>cloud</category>
      <category>beginners</category>
      <category>security</category>
    </item>
    <item>
      <title>My First AWS EC2 Hosting Experience: A Step-by-Step Guide -- Nodejs</title>
      <dc:creator>Ikenna Iheanaetu</dc:creator>
      <pubDate>Tue, 18 Feb 2025 01:05:08 +0000</pubDate>
      <link>https://forem.com/tonysteel/my-first-aws-ec2-hosting-experience-a-step-by-step-guide-nodejs-3g95</link>
      <guid>https://forem.com/tonysteel/my-first-aws-ec2-hosting-experience-a-step-by-step-guide-nodejs-3g95</guid>
      <description>&lt;p&gt;Hey there, fellow developers! I wanted to share my recent experience setting up my first application on AWS EC2. I've been working on becoming an AWS Community Builder, and this project was an important step in that journey. If you're considering using EC2 for hosting, hopefully my experience will help make your process smoother.&lt;/p&gt;

&lt;h2&gt;
  
  
  What is EC2 and Why I Chose It
&lt;/h2&gt;

&lt;p&gt;Amazon Elastic Compute Cloud (EC2) is basically AWS's virtual server offering. I chose EC2 because I wanted full control over my environment while still leveraging the reliability of AWS infrastructure. Plus, the free tier option was perfect for my initial testing phase.&lt;/p&gt;

&lt;h2&gt;
  
  
  Let's Get Started
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Prerequisites&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;An AWS account (obviously!)&lt;/li&gt;
&lt;li&gt;Basic command line knowledge&lt;/li&gt;
&lt;li&gt;A simple application to deploy (I used a Node.js app)&lt;/li&gt;
&lt;li&gt;About 30-45 minutes of your time&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Step 1: Launching Your EC2 Instance
&lt;/h2&gt;

&lt;ol&gt;
&lt;li&gt;Log into the AWS Management Console and navigate to EC2&lt;/li&gt;
&lt;li&gt;Click on "Launch Instance"&lt;/li&gt;
&lt;li&gt;Pick your Amazon Machine Image (AMI) - I went with Amazon Ubuntu Server 24.04 LTS because it's optimized for EC2 and has good support&lt;/li&gt;
&lt;li&gt;Choose an instance type - t2.micro is free tier eligible and works well for small apps&lt;/li&gt;
&lt;li&gt;Configure your instance details - I kept most settings at default&lt;/li&gt;
&lt;li&gt;Add storage - the default 8GB was enough for my app&lt;/li&gt;
&lt;li&gt;Add tags - I just tagged it with Name: MyFirstEC2&lt;/li&gt;
&lt;li&gt;Configure security group - This is crucial! I created a new security group and:&lt;/li&gt;
&lt;li&gt;Allowed SSH (port 22) from my IP address only&lt;/li&gt;
&lt;li&gt;Allowed HTTP (port 80) from anywhere&lt;/li&gt;
&lt;li&gt;Allowed HTTPS (port 443) from anywhere&lt;/li&gt;
&lt;li&gt;Review and launch - This is when AWS prompts you to create a key pair. Download it and keep it safe.&lt;/li&gt;
&lt;/ol&gt;

&lt;h2&gt;
  
  
  Step 2: Connecting to Your Instance
&lt;/h2&gt;

&lt;p&gt;Wait for your instance to initialize (it'll show "running" status). Then:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;# Connect via SSH
ssh -i your-key-file.pem ubuntu@your-instance-public-dns
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;For the public dns use your public IPV4 address&lt;/p&gt;

&lt;h2&gt;
  
  
  Step 3: Setting Up Your Server
&lt;/h2&gt;

&lt;p&gt;Once connected, I ran:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;# Update and Upgrade linux machine
sudo apt update &amp;amp;&amp;amp; sudo apt upgrade

# Install node version manager (nvm) by typing the following at the command line.
sudo su -
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.34.0/install.sh | bash

# Activate nvm by typing the following at the command line.
. ~/.nvm/nvm.sh

# Use nvm to install the latest version of Node.js by typing the following at the command line.
nvm install node

# Test that node and npm are installed and running correctly by typing the following at the terminal:
node -v
npm -v

# To install git, run below commands in the terminal window:
sudo apt-get update -y
sudo apt-get install git -y

# Just to verify if system has git installed or not
git — version
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;&lt;strong&gt;Step 4: Deploying Your Application&lt;/strong&gt;&lt;br&gt;
I cloned my repo, installed dependencies, and started my app:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;git clone https://github.com/your-username/your-repo.git
cd your-repo
npm install
npm run dev
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;After installing your project dependencies, enter your start script, for me it is npm run dev.&lt;/p&gt;

&lt;p&gt;You should also know that once you close your ssh session the app would stop running, for my own project I am using pm2 as my process manager which is setup in the project. If you don't have it setup use the instructions below&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;# Install PM2
sudo npm install -g pm2

# Start your app with PM2
pm2 start app.js

# Make PM2 restart on server reboot
pm2 startup
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;&lt;strong&gt;Challenges I Faced&lt;/strong&gt;&lt;br&gt;
For the most part I didn't face any challenges, spinning up an ec2 instance for the first time was relatively easy.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Best Practices I Learned&lt;/strong&gt;&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Security is paramount: Only open the ports you need, restrict SSH access to your IP&lt;/li&gt;
&lt;li&gt;Automate everything: Learn basic bash scripting to automate your setup&lt;/li&gt;
&lt;li&gt;Monitor your resources: AWS has great monitoring tools - use them!&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;&lt;strong&gt;Next Steps&lt;/strong&gt;&lt;br&gt;
Next I'll be sharing how to add environment variables to your project and domain configuration.&lt;br&gt;
If you're just starting with AWS, I highly recommend their documentation - it's surprisingly readable and has great examples.&lt;br&gt;
That's it for now! Feel free to comment with any questions or share your own EC2 experiences. I'm still learning and would love to hear your tips too!&lt;/p&gt;

</description>
    </item>
  </channel>
</rss>
