Ravi Sir's Cards › AWS
When to use a role
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Long-lived access keys on EC2 or in GitHub are how student accounts get hijacked.
What is it?
Prefer roles for EC2, Lambda, cross-account access, and humans via Identity Center. Use IAM users sparingly for break-glass or old tools.
How to do it
Attach an instance profile / execution role / permission set instead of creating an access key.
No long-lived keys
Example
Lambda reads DynamoDB with its execution role; you never paste a secret key into the function code.