Set your Publisher ID in src/config/ads.ts to display live ads.
IAM: Identity & Access Management & Least Privilege
Users, Groups, Roles, JSON Policies, MFA, and Principle of Least Privilege
AWS Identity and Access Management (IAM) controls authentication and authorization across all AWS services, governing who can access which cloud resources.
Core IAM Building Blocks
IAM Users: Represent individual humans or applications requiring long-term credentials.
IAM Groups: Collections of users sharing identical permission sets (e.g. "DevOpsEngineers", "BillingAdmins").
IAM Roles: Temporary credentials assumed by AWS services (e.g. an EC2 instance assuming a role to read S3) or federated identity users, eliminating hardcoded access keys.
Principle of Least Privilege: Always grant only the absolute minimum permissions required to perform a specific job.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::codexia-course-assets",
"arn:aws:s3:::codexia-course-assets/*"
]
}
]
}Never use the AWS Root Account for everyday administrative tasks! Lock it with Multi-Factor Authentication (MFA) and create individual IAM users or IAM Identity Center access.
Set your Publisher ID in src/config/ads.ts to display live ads.
Test Yourself With Exercise
What security best practice dictates that users should only receive the minimum permissions necessary to accomplish their tasks?