An IAM user is an AWS identity for a person or application. During deployment, create one with only the permissions the task requires instead of using account-level credentials. section 12.3.4
Prepare an IAM user for AWS deployment:
- Open IAM, choose Users, and create a user. section 12.3.4
- Attach policies directly, such as AdministratorAccess-AWSElasticBeanstalk, AmazonEC2FullAccess, and AmazonS3FullAccess. section 12.3.4
- Create an access key, then store the access-key and secret-access-key pair safely because AWS will not show it again. section 12.3.4
Figure 12.6 Adding the appropriate permissions for an IAM user
Use the permissions-console view to verify which policies are attached to the IAM user. section 12.3.4

