Search

Lessons (20)

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  … See [IAM policy attachment controls](https://docs.aws.amazon.com/IAM/latest/UserGuide/access controlling.html). Finding and …

• IAM: Who Can Do What

  … Further reading: [IAM evaluation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference policies evaluation-logic.html), [IAM …

• Practical Project: Deploy a Real CRM App on EKS

  … Create the cluster and node group eksctl creates the VPC, public and private subnets, NAT gateway, IAM roles …

• Practical Lab: S3 File Upload and CloudFront Delivery with NestJS

  … Not what you should run in production. bash aws iam create-user --user-name myapp-nestjs aws iam …

• Multi-Account Strategy, Governance and Security Operations

  … They are guardrails, not grants. json { "Version": "2012-10-17", "Statement": [ { "Sid": "DenyOutsideApprovedRegions", "Effect": "Deny", "NotAction": ["iam: ", "organizations …

• AWS Security Building Blocks

  … The KMS key policy and IAM permissions govern who may use the key. Encryption at rest protects stored …

• Containers at Scale: ECS Deep Dive and EKS

  … Map Kubernetes ServiceAccounts to IAM roles : - EKS Pod Identity (simpler, association-based) or IRSA (OIDC-based). - The pod …

• Dependencies, Data Sources, and Resource Lifecycle

  … It is not a substitute for IAM, backups, or review. create before destroy asks Terraform to create a …

• AWS Interview Questions: Clear Answers

  … I keep the bucket private and use IAM roles or short-lived presigned URLs. ECS or Lambda? Lambda …

• Serverless Architecture

  … Data API, or serverless-friendly DBs Least-privilege IAM per function Each function gets only the permissions it …

• Safe AWS Deployments with IaC and CI/CD

  … updating-stacks-changesets.html), [IAM OIDC federation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id roles providers …

• Run Containers on AWS with ECR and ECS

  … Further reading: [ECS roles](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-iam-role-overview.html), [Fargate …

• S3: Store Files Safely

  … Let your app access the bucket using its IAM role. Give only the paths and actions it needs …

• Testing, Preconditions, and Policy Checks

  … Mock providers can test configuration logic without real API calls, but mocks cannot demonstrate real provider behavior, IAM …

• EC2, Storage and Auto Scaling

  … An instance profile connects an IAM role to the instance so software can obtain temporary credentials. Start with …

• Terraform: Start Here

  … networks, storage, IAM, managed services, and platform settings. Use application delivery tools for frequent code releases and configuration …

• State, Remote Backends, and Locking

  … Removing an active lock can corrupt state. Practice: draw which IAM permissions a dev runner and a prod …

• AWS: Start Here

  … Turn on MFA, create separate development and production accounts when possible, and use IAM Identity Center or roles …

• Drift, Troubleshooting, and Disaster Recovery

  … fails to create another resource because of an IAM denial. Successfully created resources normally remain, and successful operations …

• VPC Endpoints, Transit Gateway and Hybrid Networking

  … allowing port 443 from the task, and appropriate IAM and resource permissions. An endpoint does not grant access …