Navigating the AWS Management Console

The AWS Management Console is the web dashboard where you view and control your account in a browser. For security work, it is where you start every investigation.

You can sign in as the root user (the account owner) or as an IAM identity. Lock root away and use an IAM user instead. It is the safer habit.

The console holds hundreds of services. Just use the search bar at the top to jump straight to IAM, S3, or GuardDuty. Pin your favorites to go even faster.

The top-right region selector picks which copy of a service you see. A classic gotcha: "missing" resources are usually just in another region. Always check it.

A few services are global — like IAM, CloudFront, and Route 53 — so the region selector does not apply. Most others are regional. Knowing which is which saves confusion.

The account menu in the top-right opens settings, security credentials, and billing. Surprise costs can even hint at a breach, since attackers spin up pricey resources.

The IAM dashboard is your security home base. It flags things to fix, like missing MFA on root or old keys, and it is where you manage users, roles, and policies.

CloudShell is a terminal built into the console, already signed in as you. Run CLI commands instantly, with no local setup and the same audit trail. ⚡

Security tools like GuardDuty and Security Hub show their alerts as findings dashboards. Reading them is usually the first step when you triage an incident.

The console is great for inspecting and quick fixes, but weak for repeatable work. For anything at scale, you move to the CLI or infrastructure as code.

You can switch roles to act as a different identity, even in another account, without signing out. Each switch is logged as an AssumeRole call in the audit trail.

Test your console navigation knowledge.

The console is your browser window into AWS: sign in with IAM not root, search to find services, and always confirm the region. Use it to see; use the CLI to enforce.