Follow the request/data flow through the architecture.
Work through each concept and mark it understood. This unlocks the knowledge check.
Identity & Access Management — who (principals) can do what (actions) on which resources.
Why it matters
It is the foundation of all AWS security.
When to use it
Always. Grant least privilege, use roles over long-lived keys, enable MFA.
Example
{
"Effect": "Allow",
"Action": ["s3:GetObject"],
"Resource": "arn:aws:s3:::reports-bucket/finance/*"
}Gotcha (exam trap)
Never use the root account day-to-day, and avoid wildcards (Action:"*", Resource:"*") in production policies.
Finish the walkthrough above to unlock the check.
Bleepx skills build on each other. Continue your learning path across Query, Lab, and Cloud.