Ravi Sir's Cards › AWS
LeadingKeys IAM
This revision card explains LeadingKeys IAM. It starts from the need that app filters alone are not isolation. It describes IAM dynamodb — LeadingKeys = TENANT#tid on the role. The how-to section covers how to attach condition , then attempt cross-tenant Get , then must Deny , then CloudTrail. An example on the card is vikram Patil demos Deny before production cutover.
Read card text
What this card says
Why do we need it?
App filters alone are not isolation.
What is it?
IAM dynamodb:LeadingKeys = TENANT#tid on the role.
LeadingKeys
How to do it
Attach condition → attempt cross-tenant Get → must Deny → CloudTrail.
Example
Vikram Patil demos Deny before production cutover.