Cornell AWS account owners can create custom AWS IAM roles and have them linked to Cornell AD so that users with Cornell netids can use Shibboleth to authenticate to AWS and be granted the privileges in the custom role. |
Follow these steps to create a new custom role in your AWS account:
The next part of the process is to create and configure the AD group connected to this role. This is done by the Cloud team.