Ravi Sir's Cards › AWS
Does AD replace permission sets?
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
What it is
No. AD (or Entra ID) authenticates who you are. Permission sets authorize what you may do in AWS after sign-in.
AuthN vs AuthZ
Why it matters
Connecting AD without least-privilege permission sets can grant everyone broad AWS admin through a single group mistake.
How / example
Map AD groups to tight permission sets per account (e.g. Developers → PowerUser on dev only).