AWS Account Setup and Free Tier
Setting up an AWS account is the first hands-on step in the AWS journey. AWS offers a Free Tier — a generous set of services that are available at no cost for 12 months after account creation, plus some services that remain free forever. This makes it possible to learn, experiment, and build real projects without spending money.
What Is the AWS Free Tier?
The AWS Free Tier is a program that gives new AWS accounts access to a defined amount of services at no charge. It is designed so that learners and small-scale builders can explore AWS without paying.
The Free Tier has three types of offers:
| Free Tier Type | Duration | Example |
|---|---|---|
| 12 months free | First 12 months after account creation | 750 hours/month of EC2 t2.micro |
| Always free | No expiry — free forever | 1 million Lambda requests/month |
| Trial | Short-term trial (30–90 days) | Amazon SageMaker Canvas 2-month trial |
Most Useful Free Tier Services for Learners
- EC2: 750 hours/month of t2.micro or t3.micro instance (12 months)
- S3: 5 GB of standard storage (12 months)
- RDS: 750 hours/month of db.t2.micro (12 months)
- Lambda: 1 million free requests per month (always free)
- DynamoDB: 25 GB of storage (always free)
- CloudWatch: 10 custom metrics and 10 alarms (always free)
Step-by-Step: How to Create an AWS Account
Step 1 — Go to the AWS Website
Visit aws.amazon.com and click "Create an AWS Account" on the top right corner.
Step 2 — Enter Email and Account Name
Provide a valid email address and choose an account name. The account name is just a label — it can be anything like "my-learning-account".
Step 3 — Set a Root Password
The root account is the master account. Create a strong, unique password. Important: After setup, the root account should not be used for daily tasks. An IAM admin user is created for day-to-day operations (covered in the IAM topic).
Step 4 — Enter Contact Information
Choose "Personal" for individual use or "Business" for company use. Fill in the required address and phone number.
Step 5 — Add a Payment Method
A credit or debit card is required even for the Free Tier. AWS charges a small verification amount (usually $1 or equivalent) that is refunded. The card is charged only if usage goes beyond free tier limits.
Step 6 — Phone Verification
AWS sends a PIN via call or SMS to verify identity. Enter the PIN to proceed.
Step 7 — Choose a Support Plan
Select "Basic Support" — it is completely free and sufficient for learning. Other paid plans (Developer, Business, Enterprise) are for production workloads with faster response times from AWS support.
Step 8 — Sign In to the Console
After account creation, sign in at console.aws.amazon.com. The AWS Management Console is the web-based dashboard for managing all AWS services.
[aws.amazon.com]
|
[Create Account]
|
[Enter Email + Name]
|
[Set Password]
|
[Contact Info]
|
[Add Payment Card]
|
[Phone Verification]
|
[Select Support Plan: Basic (Free)]
|
[AWS Management Console — Ready!]
Navigating the AWS Management Console
The AWS Management Console is a browser-based interface. Key areas to know:
- Search Bar (top): Type any service name — like "EC2" or "S3" — to navigate directly to it.
- Services Menu: Browse all services organized by category.
- Region Selector (top right): Always check and set the correct Region before creating resources. Resources in one Region are not visible in another.
- Account Menu (top right): Manage billing, security settings, and account preferences.
- AWS CloudShell: A terminal accessible directly from the console to run AWS CLI commands.
Setting Up AWS CLI (Command Line Interface)
Besides the web console, AWS also provides a CLI — a tool to manage AWS services from a terminal using text commands. The CLI is used heavily in automation and DevOps workflows.
Install AWS CLI
Download the installer from the official AWS documentation for Windows, macOS, or Linux. After installation, verify with:
aws --version
Configure AWS CLI with Access Keys
Access keys are like a username and password for the CLI. They are generated from IAM (Identity and Access Management):
- Log into the Console → IAM → Users → Select the user → Security Credentials → Create access key.
- Download the Access Key ID and Secret Access Key.
- Run the following command and enter the keys:
aws configure AWS Access Key ID: AKIAIOSFODNN7EXAMPLE AWS Secret Access Key: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY Default region name: ap-south-1 Default output format: json
After this setup, AWS services are manageable from the command line. Example — list all S3 buckets:
aws s3 ls
Billing and Cost Alerts — Must Set Up Immediately
Even with the Free Tier, accidental charges can happen if a service is left running or limits are exceeded. Setting up billing alerts protects against unexpected bills.
Enable Billing Alerts
- Go to the AWS Console → click the account name → Billing and Cost Management.
- Go to Billing Preferences → enable "Receive Free Tier Usage Alerts" and "Receive Billing Alerts".
Create a Budget Alert
- In Billing → select "Budgets" → Create Budget.
- Set a monthly cost budget (example: $5).
- Add an email address — AWS sends an alert when usage approaches the limit.
Security Best Practices After Account Creation
- Enable MFA on the root account: Multi-Factor Authentication adds a second verification step. Go to IAM → Security → Activate MFA on root account.
- Do not use the root account daily: Create an IAM Admin user with limited permissions for all regular tasks.
- Never share access keys: Access keys are like passwords. Keep them secret and rotate them regularly.
- Review unused resources: Resources left running consume free tier allowances or charge money. Always terminate resources after practice.
Summary
- AWS offers a Free Tier with three types of free offers: 12-month free, always-free, and short-term trials.
- Account creation requires an email, contact info, payment method, and phone verification.
- After setup, the AWS Management Console is used to navigate and manage services.
- Billing alerts prevent unexpected charges — set them up immediately after account creation.
- Secure the root account with MFA and create a separate IAM user for day-to-day use.
