Ravi Sir's Cards › AWS
Break-glass admin path
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
When SSO is down, teams without a planned emergency admin either stay locked out or share root passwords on WhatsApp.
What is it?
Break-glass is a rare emergency admin role or user with MFA, tight monitoring, and a written procedure — not daily AdministratorAccess for everyone.
break-glass
How to do it
Document who may use it, require MFA, alert on AssumeRole/console login, practice once, then keep it unused.
Example
CloudTrail shows a break-glass AssumeRole only during a drill; daily work stays on ReadOnly/PowerUser permission sets.