Ensure that the existing IAM policies are attached only to groups in order to efficiently assign permissions to all the users within your AWS account.
Defining permissions at the IAM group level instead of IAM user level will allow you manage more efficiently the user-based access to your AWS resources. With this new model you can create groups, attach the necessary policies for each group, then assign IAM users to these groups as needed. The model has few valuable advantages such as removing duplication of information and effort as you don't need to define policies for each individual user anymore or switching existing users between groups as they receive different roles in your organization.
To determine if your IAM users have any policies attached, perform the following:
To change the access permissions model and attach policies to IAM groups instead of users, perform the following: