Paths/DevOps Engineer/AWS / IAM & Least Privilege
Document a Key Rotation Runbook
Keys outlive the people who created them. Write the script that creates a replacement key, deploys it and revokes the old one - in that order.
Validator
⏱ 0:00
IDLE — checks run live as you type commands; submit when done
01Requirements
live checks- Directory ~/aws exists○
- File ~/aws/rotate-keys.sh exists○
- The script identifies the caller before it changes anything○
- The script creates the new key and deletes the old one○
02Walkthrough
1 of 7 revealed- 01
Create the aws directory
Runbooks and the scripts they describe belong together.
mkdir ~/aws - 6 locked · each failed submit reveals one
03Stuck?
0 of 3 revealedTake a hint without losing the lab — each one points at the thing to look at, not at the answer.
04AI Tutor
guides, never solvesTell me what you're stuck on — I'll nudge, not solve. Which requirement are you looking at?
04Notebook
saved locally in this browserlearner@lab — ubuntu:24.04
Session is disposable
↑/↓ recalls commands · Ctrl+Enter submits · type help for the command list