CLOUD LABS
AWS IAM Permission Boundaries
In this lab, we will thoroughly explore permissions boundaries for AWS IAM entities. We will also understand the effective permissions in the presence of identity policies, resource-based policies, and permissions boundaries.
intermediate
Certificate of Completion
Learning Objectives
Whenever an AWS IAM entity requests to perform an action, the request context is checked for policies that apply to the request. There are different types of policies that determine whether a certain request is authorized or not. These policies include identity-based policies, resource-based policies, and permissions boundaries. The identity-based policies and permissions boundaries apply to IAM entities. However, resource-based policies apply to resources, defining which entities can access the resource.
In this Cloud Lab, you’ll create an IAM user and attach an identity-based policy to it. You’ll test the effective permissions of the new user by creating an S3 bucket and uploading and deleting files in it through the new user. You’ll then add different permissions boundaries to the new user and test the effective permissions with the same process.
Lastly, you’ll conclude the Cloud Lab by adding a resource-based policy to the S3 bucket we created through the new user and test the effective permissions again through a similar process.
The following is the high-level architecture diagram of the infrastructure you’ll create in this Cloud Lab:
Trusted by 1.4 million developers working at companies including
Your method is simple, straight to the point and I can practice with it everywhere, even from my phone, that's something I have never had in other learning platforms.
I highly recommend Educative. The courses are well organized and easy to understand.
I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.
I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.
Your method is simple, straight to the point and I can practice with it everywhere, even from my phone, that's something I have never had in other learning platforms.
I highly recommend Educative. The courses are well organized and easy to understand.
I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.
Get access to Educative Cloud Labs
