[筆記] Ultimate AWS Certified Developer Associate (2)

章節連結

給自己 2022 年的新目標 – AWS Certified Developer Associate 的學習筆記。這篇筆記從 IAM 開始。
notes-ultimate-aws-certified-developer-associate-1


課程相關資訊

[連結]:https://www.udemy.com/course/aws-certified-developer-associate-dva-c01/learn/lecture/11851550

本篇範圍:Chapter 4

請注意:本系列文章為個人對應課程的消化吸收後,所整理出來的內容。換言之,並不一定會包含全部的課程內容,也有可能會添加其他資源來說明。


內容

1. Identity and Access Management ( IAM ), Global Service
2. 一如慣例,root A/C 是不應該被使用和分享的,這樣才能確保帳號擁有權及安全性
3. User 是可以被 Group 的,一個 User 可以被歸類在很多個 Group
4. Group 裡面不能再包含其他 Group
5. User 和 Group 用 JSON 來規範 Permission
6. Permission 規範原則必定為 least pricilege principle
7. 你可以創建 User 的 alias 名稱,並建立連結讓你日後好直接登入
8. IAM 的 Policies 是有繼承性的
9. 一個 Policy 的 Statement,必備值為標示 Effect, Principal, Action 和 Resource
10. 邏輯如下:

  • 預設都是 Deny
  • 若有明確標出 Allow 的,就會將預設值覆蓋
  • 若有明確標出 Deny 的,就會將所有的 Allow 變成 Deny

換言之,你需要把整體的 Policy Statements 看完,才會知道最終結果。這些 Policy Statements 可以來自於單獨寫於這個 User 上的,以及其所屬的各個 Group 的聯集

11. IAM 的 Policy 是可以針對 CRUD 做細部設定的,你也可以建立你自己的 Policy


系列文章

  • [筆記] Ultimate AWS Certified Developer Associate (9)
  • [筆記] Ultimate AWS Certified Developer Associate (8)
  • [筆記] Ultimate AWS Certified Developer Associate (7)
  • [筆記] Ultimate AWS Certified Developer Associate (69)
  • [筆記] Ultimate AWS Certified Developer Associate (68)
  • [筆記] Ultimate AWS Certified Developer Associate (67)
  • [筆記] Ultimate AWS Certified Developer Associate (66)
  • [筆記] Ultimate AWS Certified Developer Associate (65)
  • [筆記] Ultimate AWS Certified Developer Associate (64)
  • [筆記] Ultimate AWS Certified Developer Associate (63)
  • [筆記] Ultimate AWS Certified Developer Associate (62)
  • [筆記] Ultimate AWS Certified Developer Associate (61)
  • [筆記] Ultimate AWS Certified Developer Associate (60)
  • [筆記] Ultimate AWS Certified Developer Associate (6)
  • [筆記] Ultimate AWS Certified Developer Associate (59)
  • [筆記] Ultimate AWS Certified Developer Associate (58)
  • [筆記] Ultimate AWS Certified Developer Associate (57)
  • [筆記] Ultimate AWS Certified Developer Associate (56)
  • [筆記] Ultimate AWS Certified Developer Associate (55)
  • [筆記] Ultimate AWS Certified Developer Associate (54)
  • [筆記] Ultimate AWS Certified Developer Associate (53)
  • [筆記] Ultimate AWS Certified Developer Associate (52)
  • [筆記] Ultimate AWS Certified Developer Associate (51)
  • [筆記] Ultimate AWS Certified Developer Associate (50)
  • [筆記] Ultimate AWS Certified Developer Associate (5)
  • [筆記] Ultimate AWS Certified Developer Associate (49)
  • [筆記] Ultimate AWS Certified Developer Associate (48)
  • [筆記] Ultimate AWS Certified Developer Associate (47)
  • [筆記] Ultimate AWS Certified Developer Associate (46)
  • [筆記] Ultimate AWS Certified Developer Associate (45)
  • [筆記] Ultimate AWS Certified Developer Associate (44)
  • [筆記] Ultimate AWS Certified Developer Associate (43)
  • [筆記] Ultimate AWS Certified Developer Associate (42)
  • [筆記] Ultimate AWS Certified Developer Associate (41)
  • [筆記] Ultimate AWS Certified Developer Associate (40)
  • [筆記] Ultimate AWS Certified Developer Associate (4)
  • [筆記] Ultimate AWS Certified Developer Associate (39)
  • [筆記] Ultimate AWS Certified Developer Associate (38)
  • [筆記] Ultimate AWS Certified Developer Associate (37)
  • [筆記] Ultimate AWS Certified Developer Associate (36)
  • [筆記] Ultimate AWS Certified Developer Associate (35)
  • [筆記] Ultimate AWS Certified Developer Associate (34)
  • [筆記] Ultimate AWS Certified Developer Associate (33)
  • [筆記] Ultimate AWS Certified Developer Associate (32)
  • [筆記] Ultimate AWS Certified Developer Associate (31)
  • [筆記] Ultimate AWS Certified Developer Associate (30)
  • [筆記] Ultimate AWS Certified Developer Associate (3)
  • [筆記] Ultimate AWS Certified Developer Associate (29)
  • [筆記] Ultimate AWS Certified Developer Associate (28)
  • [筆記] Ultimate AWS Certified Developer Associate (27)
  • [筆記] Ultimate AWS Certified Developer Associate (26)
  • [筆記] Ultimate AWS Certified Developer Associate (25)
  • [筆記] Ultimate AWS Certified Developer Associate (24)
  • [筆記] Ultimate AWS Certified Developer Associate (23)
  • [筆記] Ultimate AWS Certified Developer Associate (22)
  • [筆記] Ultimate AWS Certified Developer Associate (21)
  • [筆記] Ultimate AWS Certified Developer Associate (20)
  • [筆記] Ultimate AWS Certified Developer Associate (19)
  • [筆記] Ultimate AWS Certified Developer Associate (18)
  • [筆記] Ultimate AWS Certified Developer Associate (17)
  • [筆記] Ultimate AWS Certified Developer Associate (16)
  • [筆記] Ultimate AWS Certified Developer Associate (15)
  • [筆記] Ultimate AWS Certified Developer Associate (14)
  • [筆記] Ultimate AWS Certified Developer Associate (13)
  • [筆記] Ultimate AWS Certified Developer Associate (12)
  • [筆記] Ultimate AWS Certified Developer Associate (11)
  • [筆記] Ultimate AWS Certified Developer Associate (10)
  • [筆記] Ultimate AWS Certified Developer Associate (1)
  • 按讚加入粉絲團

    延伸閱讀