New to AWS. I have read this post about external access but that was for sftp. I need to grant external developers access to our server so they can write some code that will download data from a third party site. Everything I am reading is about "granting access" refers back to the IAM, but I don't want these users to be able to launch anything, etc. Is IAM just for console access or must I also use this to grant access to server ? Can I just create a login like a normal server and not put anything about them in the IAM console ? If I have to go through IAM, how do I restrict their access to do anything in the console.

CodePudding user response：

If you somehow manage this person account you can assign role for him to perform specific tasks. Please see section IAM roles. If you want just allow user to connect to you EC2 instance, you can ask user generate ssh key and upload it in aws console.