Level 1 · Core
Identity and permissions
Almost every AWS error a beginner hits is an IAM error wearing a different hat. AccessDenied on a bucket, a Lambda that cannot write logs, an EC2 instance that cannot reach a database — the same evaluation logic decides all three.
Chapters
- How AWS decides whether to allow a callEvery AccessDenied in AWS is the same algorithm returning a decision you did not expect. Once you can run that algorithm in your head, permission errors stop being mysterious.
- How AWS manages temporary accessAn access key committed to a repository is a security breach waiting to happen, but learning to use temporary credentials through roles completely removes this risk.