Ravi Sir's Cards › AWS
Network or identity?
This comparison card contrasts Network or identity. SourceIp fence is described as blocks stolen keys used off-network. Identity-only IAM: Relies on who the caller is, not where. The card pairs SourceIp fence with high-sensitivity downloads, and Identity-only IAM with break-glass admins.
Read card text
What this card says
Network or identity?
SourceIp fence
Blocks stolen keys used off-network.
Identity-only IAM
Relies on who the caller is, not where.
Key points
Statements bucket from office only.
Admin role usable anywhere with MFA.
Example
NotIpAddress Deny / MFA + least privilege without IP
Use when
High-sensitivity downloads.
Break-glass admins.