Ravi Sir's Cards › AWS
Why add Condition to an Allow?
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
What it is
Condition narrows when an Allow applies (IP, MFA, tags, region). Without it, a leaked key works from anywhere the network allows.
Condition
Why it matters
Each statement needs the Condition that should apply; Boolean MFA values are strings "true"/"false" in IAM JSON.
aws:MultiFactorAuthPresent
How / example
Lab: Allow s3:GetObject only if aws:SourceIp is your /32; prove AccessDenied from CloudShell.