Ravindra BagaleCourses & study guides मराठी Track your progress

Ravi Sir's Cards › AWS

Daily IAM admin habits

What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.

Daily IAM admin habits Least privilege without CloudTrail is guesswork after an incident. Prefer Identity Center for humans, roles for compute, MFA everywhere, permission boundaries when delegating, and CloudTrail in every account/region you use. Turn on organization CloudTrail (or at least multi-Region trail), review IAM Access Analyzer findings, remove unused keys. A new Lambda uses an execution
Daily IAM admin habits · Download PNG
Read card text

What this card says

Why do we need it?

Least privilege without CloudTrail is guesswork after an incident.

What is it?

Prefer Identity Center for humans, roles for compute, MFA everywhere, permission boundaries when delegating, and CloudTrail in every account/region you use.

CloudTrail

How to do it

Turn on organization CloudTrail (or at least multi-Region trail), review IAM Access Analyzer findings, remove unused keys.

Example

A new Lambda uses an execution role; humans use portal tiles; root stays locked with MFA.

See all AWS revision cards