Identity and access management
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
give every service the minimum permissions it needs.
Planned topics
- Principals (users, roles, workloads) get policies that allow actions on resources.
- Least privilege: start from nothing and add only what is needed; avoid wildcards.
- Workloads use roles (workload identity) rather than long-lived access keys.
- Humans use SSO and MFA; avoid the root account.
- Review permissions regularly and use audit logs.
Draft outline details
Demonstration
a policy allowing orders read and write on one bucket prefix only, nothing else.
Check your understanding
Why prefer roles to access keys?
Show answer
Roles issue short-lived credentials that are not stored in code.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.