Paths/DevOps Engineer/AWS / IAM & Least Privilege
Write a Least-Privilege IAM Policy
AdministratorAccess is not a starting point. Write a policy that grants exactly two S3 read actions on one bucket and nothing else.
Validator
⏱ 0:00
IDLE — checks run live as you type commands; submit when done
01Requirements
live checks- Directory ~/aws exists○
- File ~/aws/iam-policy.json exists○
- The policy allows s3:GetObject and s3:ListBucket○
- The policy scopes the access to the lab-artifacts bucket○
02Walkthrough
1 of 4 revealed- 01
Create the aws directory
IAM documents are configuration - they belong in a folder you can review.
mkdir ~/aws - 3 locked · each failed submit reveals one
03Stuck?
0 of 3 revealedTake a hint without losing the lab — each one points at the thing to look at, not at the answer.
04AI Tutor
guides, never solvesTell me what you're stuck on — I'll nudge, not solve. Which requirement are you looking at?
04Notebook
saved locally in this browserlearner@lab — ubuntu:24.04
Session is disposable
↑/↓ recalls commands · Ctrl+Enter submits · type help for the command list