AWS Accounts, Access, and Costs
The question for this group
Who can change my infrastructure, in which account, and at what cost?
Complete this group before provisioning paid lab resources.
Topics to explore
- Cloud responsibility: managed services, shared responsibility, Regions, Availability Zones, and resource scope.
- Account setup: root user protection, MFA, IAM Identity Center, and temporary credentials.
- Authorization: principals, roles, trust policies, permission policies, least privilege, and explicit deny.
- Daily access: console, CLI profiles, SDK credentials, account identity, Region selection, and session expiry.
- Environment isolation: development, staging, production, account boundaries, and tagging.
- Cost basics: pricing dimensions, budgets, alerts, Cost Explorer, quotas, resource inventory, and teardown.
Practice target
Set up a learning account and budget notifications, verify the CLI account and Region, and explain a deliberately denied read operation.