Скачать или смотреть AWS IAM: Architecture, Security, and Incident Analysis

The discussion in this podcast provides an extensive overview of AWS Identity and Access Management (IAM), describing it as the foundational service governing all resource access within the AWS ecosystem. It details IAM’s core architectural components, including Users, Groups, Roles, and Policies, emphasizing the use of temporary credentials and the Principle of Least Privilege. Furthermore, it explains the complex policy evaluation logic and advanced security features such as Service Control Policies (SCPs) and Permissions Boundaries used for setting enterprise-wide guardrails. Finally, it reviews the crucial alignment of IAM with frameworks like NIST and analyzes major security incidents to illustrate best practices, highlighting that misconfigurations remain the leading cause of cloud breaches under the Shared Responsibility Model.