Ravindra BagaleCourses & study guides मराठी Track your progress

Ravi Sir's Cards › AWS

EC2 reads S3 with a role

What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.

EC2 reads S3 with a role Keys in ~/.aws/credentials on a server leak through Git and AMIs. Like a flat key copied by every tenant. An instance profile wraps a role. EC2 gets rotating keys from the metadata service. Create role → trust ec2.amazonaws.com → attach S3 read → Actions → Security → Modify IAM role. On the instance: aws sts get-caller-identity shows assumed-role/…/i-0abc.
EC2 reads S3 with a role · Download PNG
Read card text

What this card says

Why do we need it?

Keys in ~/.aws/credentials on a server leak through Git and AMIs. Like a flat key copied by every tenant.

What is it?

An instance profile wraps a role. EC2 gets rotating keys from the metadata service.

instance profile

How to do it

Create role → trust ec2.amazonaws.com → attach S3 read → Actions → Security → Modify IAM role.

Example

On the instance: aws sts get-caller-identity shows assumed-role/…/i-0abc.

aws sts get-caller-identity

See all AWS revision cards