Session 2 - Identity & Access Management

This session is the 2nd session of the AWS learning series. We expect all the participants to join all the sessions.
The session covers: IAM building blocks (users, groups, roles, policies); policy anatomy (Effect/Action/Resource/Condition); roles and temporary credentials vs. long-lived keys; least privilege; IAM Identity Center as the modern default; the AWS CLI & CloudShell; and encryption/secrets with KMS and Secrets Manager.
Lab: admin user + MFA, a least-privilege S3 policy, a role, first CLI commands, storing a secret.

Bring your laptops and internet connections.