Ravi Sir's Cards › AWS
Least privilege
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
AdministratorAccess on every role turns one leak into a full account breach.
What is it?
Least privilege means Allow only the actions and resource ARNs needed — prefer customer-managed policies over broad AWS managed when you can.
How to do it
Start with s3:GetObject on one bucket ARN, test, then add only what fails.
Resource ARN
Example
Lambda that only reads one bucket cannot DeleteBucket even if compromised code tries.