Ravi Sir's Cards › AWS
Security in layers
This revision card explains Security in layers. It starts from the need that one checkbox never stops bots, leaked keys, and over-broad roles. It describes cognito/JWT, WAF+throttle, least-privilege IAM, secrets vault, clean logs. The how-to section notes grant GetSecretValue on one secret; never AdministratorAccess on webhooks. An example on the card is mei rotates a leaked key into Secrets Manager the same day.
Read card text
What this card says
Why do we need it?
One checkbox never stops bots, leaked keys, and over-broad roles.
What is it?
Cognito/JWT, WAF+throttle, least-privilege IAM, secrets vault, clean logs.
IAM
How to do it
Grant GetSecretValue on one secret; never AdministratorAccess on webhooks.
least privilege
Example
Mei rotates a leaked key into Secrets Manager the same day.