Independent study lab

This is an independent, free, learning-only student project. It respects every company and vendor. Trademarks belong to their owners. It is not affiliated with or endorsed by Amazon Web Services, Cisco, Genesys, Salesforce, Twilio, or any other company. If you have a concern, the page will be removed or corrected promptly through the contact form. Nothing here is sold. There are no ads. The author is happy to volunteer for any organization.

Contact: https://cyphermonkeylabs.com/#contact

IAM is not the security profile — Worked example

  1. User. Security profile and routing profile.
  2. Role. IAM for APIs and S3.
  3. Resource policy. Lambda allows Connect.
  4. Key policy. KMS allows the service role.

What usually goes wrong: Granting an agent AdministratorAccess because the security profile looked empty.

Sources and go deeper

sources.json