The Over-Privileged User

A developer, named Carl, joined the team and needed access to AWS. An overzealous admin, with little time to spare, gave him full Administrator rights directly.
"We'll scope it later", said the admin as he rushed to the next task.

Weeks pass, and the developer still has unrestricted access to every service and resource. What can come later is a security breach.

In this room, you will take on the role of a security analyst who audits user permissions, identifies and remediates misconfigurations, and develops a secure IAM deployment strategy.

Learning Objectives

• Understand how IAM policy evaluation works
• Identify over-permissive policies on IAM users
• Remove excessive permissions with scoped, least-privilege policies
• Design a group-based IAM model
• Use IAM Policy Simulator to validate permission changes

Prerequisites

• Being able to set up your environment (First Steps Into AWS room)
• Basic Linux commands (Linux Fundamentals room)
• Have a basic understanding of the IAM service (Introduction to IAM room)