Search

Lessons (14)

• AWS Security Building Blocks

  Add user sign-in with Cognito, keep credentials out of code, and understand the simple role of KMS …

• Resilience, Disaster Recovery and Multi-Region Design

  … Disaster Recovery for servers Secrets / KMS Multi-region secrets and multi-Region KMS keys Traffic : Route 53 health …

• IAM: Who Can Do What

  … An encrypted object using a customer-managed KMS key can additionally require decrypt permission and an appropriate key …

• State, Remote Backends, and Locking

  … If using a customer-managed KMS key, grant the required key permissions as well. Restrict state access because …

• Machine Learning Fundamentals

  … features = {"distance km": 8.2, "hour": 17, "rain mm": 3.0} predicted minutes = model.predict(features) The prediction …

• Storage, Search and Location Queries

  … Tokenization, ranking and filters. Find riders within 2 km Geospatial index Geohash/grid/R-tree style nearby lookup …

• RBAC and Cluster Security

  … Enabling encryption at rest for Secrets in etcd (ideally with a KMS provider). 2. Restricting RBAC on secrets …

• Python and Math Foundations with Runnable Examples

  … swapping rain and distance changes the meaning. python features = [8.0, 3.0, 1.0] distance km, item …

• Production Capstone and Interview Practice

  … A production variant may need KMS and bucket policies that require TLS; add those as explicit, reviewed requirements …

• Graphs: BFS & DFS

  … roads with distances"] w1((A)) -- 5 km --- w2((B)) end Storing a graph: adjacency list The most common …

• Multi-Account Strategy, Governance and Security Operations

  … MFA on the root user. - Use customer managed KMS keys with key policies for sensitive data. - Tag resources …

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  … may do Resource-based S3 bucket, SQS queue, KMS key, Lambda Who may use this resource Permission boundary …

• AWS Interview Questions: Clear Answers

  … s object ARN and action, inspect bucket and KMS policies if relevant, and check the network path. Do …

• Practical Project: Deploy a Real CRM App on EKS

  … is encrypted with a customer-managed KMS key, also allow kms:Decrypt on that key. Step 3: link …