Identity, security and shared responsibility

The provider secures the cloud; you secure what you put in it.

📖 Key ideas

Shared responsibility: provider secures hardware and facilities; you secure data, access and configuration.
IAM controls who can do what, using users, groups, roles and policies.
Follow least privilege: give only the permissions needed.
Turn on MFA for every account, especially root/owner.
Encrypt data at rest and in transit; never commit keys to Git.

💡 Real-life example: Like renting a flat: the builder secures the building, but you lock your own door and keep your keys safe.

Shared responsibilitySplit of security duties

IAMIdentity and access management

Least privilegeOnly the access that is needed

MFAMulti-factor authentication