Search

Lessons (18)

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  … The output should identify B and the assumed reader role. Calling assume-role in one command does not …

• Multi-Account Strategy, Governance and Security Operations

  … removing a key or restricting a role can also interrupt legitimate traffic. Changing trust prevents future assumptions but …

• IAM: Who Can Do What

  … Its permissions policy answers what the assumed role may do. An EC2 application role might trust the EC2 …

• Practical Project: Deploy a Real CRM App on EKS

  … create the pod role Trust policy ( pod-trust.json ). This lets EKS pods assume the role: json { "Version …

• Environments, Workspaces, and Multiple Accounts

  … Use an appropriately authorized assume role configuration for cross-account operations. Verify caller identity and target account before …

• Safe AWS Deployments with IaC and CI/CD

  … An OIDC trust relationship should limit which repository and workflow context can assume the deployment role. A role …

• S3: Store Files Safely

  … This Python example assumes boto3 is installed and the backend has role credentials permitting uploads to the bucket …

• Run Containers on AWS with ECR and ECS

  … Which role should you inspect? The task role, because that supplies the application's AWS permissions. Further reading …

• AWS Security Building Blocks

  … or URLs. Fetch a secret with the workload role Assume you already created a Secrets Manager secret called …

• Secrets, Ephemeral Values, and Least Privilege

  … Give the assumed role only the API operations and resources the root module needs. State permissions are separate …

• Serverless: Lambda and API Gateway

  … over HTTP. - Memory, timeout, concurrency, and role are core settings. - Assume events can be retried; make side effects …

• AWS Interview Questions: Clear Answers

  … Use a task role so the SDK obtains temporary credentials at runtime. Give that role only the application …

• AWS: Start Here

  … Turn on MFA, create separate development and production accounts when possible, and use IAM Identity Center or roles …

• EC2, Storage and Auto Scaling

  … AMI, instance type, security group, role, and startup instructions. Then let the Auto Scaling group create matching instances …

• Providers and Your First AWS Resources

  … SSO login assumes that profile has already been configured with aws configure sso . The role needs permissions for …

• DynamoDB Modeling, RDS Scaling and Data Resilience

  … Find orders by status. Keys Key Role --- --- Partition key (PK) Hashed to choose the storage partition; must spread …

• Production Capstone and Interview Practice

  … Prod uses a different account or role and a different state key. Step 3: test meaningful requirements In …

• CloudWatch: Know What Your App Is Doing

  … In Lambda, application output is sent to configured logging destinations when its role and settings allow it. In …