Internship← Cloud Security learning pathCloud Security · Module 2 of 10
Identity and access management
Control who can do what in the cloud.
📖 Key ideas
- Identity is the new perimeter in the cloud.
- Use MFA everywhere, especially for admins and root accounts.
- Least privilege: grant only needed permissions.
- Use roles and short-lived credentials instead of long-lived keys.
- Review and remove unused accounts and permissions regularly.
💡 Real-life example: Cloud IAM is a hotel key card system: each card opens only the rooms its holder needs.
MFAMulti-factor authentication
Least privilegeMinimum necessary access
RoleAssumable identity with permissions
Access reviewPeriodic permission check