CLOUD LABS
Implementing Attribute-Based Access Control (ABAC) Using Tags
In this Cloud Lab, you’ll provide a hands-on experience implementing the attribute-based access control (ABAC) authorization model in AWS, which allows the definition of access policies based on attributes of principals and resources.
advanced
Certificate of Completion
Learning Objectives
Attribute-based access control (ABAC) is an authorization model that allows users to define access policies based on attributes associated with IAM principals and AWS resources. The ABAC model allows users to use attributes like tags to make access control decisions.
In this Cloud Lab, you’ll create an IAM group and attach an attribute-based access policy that allows the users in the group to assume only the roles with the same attributes as the user. You’ll then add users in the IAM group with different attributes. You’ll also create two roles with different attributes and attach an attribute-based access policy for accessing Lambda functions with similar attributes. Afterward, you’ll try to assume each role with both users.
You’ll also create two Lambda functions with different attributes. To conclude the Cloud Lab, you’ll access both the Lambda functions with both users.
The following is the high-level architecture diagram of the infrastructure that you’ll create in this Cloud Lab:
Trusted by 1.4 million developers working at companies including
Your method is simple, straight to the point and I can practice with it everywhere, even from my phone, that's something I have never had in other learning platforms.
I highly recommend Educative. The courses are well organized and easy to understand.
I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.
I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.
Your method is simple, straight to the point and I can practice with it everywhere, even from my phone, that's something I have never had in other learning platforms.
I highly recommend Educative. The courses are well organized and easy to understand.
I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode.
Get access to Educative Cloud Labs
