Ravi Sir's Cards › AWS
Least-privilege IAM for the lab
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
AdministratorAccess on a student role is a foot-gun.
What is it?
Basic logging policy + inline DynamoDB actions on one table ARN.
How to do it
PutItem GetItem DeleteItem Scan (lab list) only on yourname-notes.
Example
Wrong table name in policy → AccessDenied in CloudWatch.