How do you create a user in AWS IAM?

Creating an IAM user is straightforward. In the AWS Management Console, navigate to IAM → Users → Add user. Provide a user name and choose the access type: programmatic (access key) for API/CLI use, or console access for the AWS Management Console. If console access is selected, set a password and decide whether the user must change it on first sign‑in. Next, attach permissions. You can add the user to existing groups that have policies, or attach policies directly to the user. For most cases, use groups to simplify management. After permissions are set, review the configuration and create the user. The console will display the user’s access key ID and secret access key (for programmatic access); store these securely. Finally, enable MFA for the user to add an extra layer of security. For automation, the same steps can be performed with the AWS CLI using aws iam create-user, aws iam create-login-profile, and aws iam attach-user-policy commands.