Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
AWS · SAA-C03

Secure access fundamentals

SAA-C03 · Lesson 1 of 23 · 3:36

YouTube loads only after you press play. Watch on YouTube ↗

In this lesson

Prepare for the SAA-C03 exam (AWS Certified Solutions Architect – Associate). In this lesson: the shared responsibility model, the root user and how to protect it, IAM users, groups, roles, and policies, least privilege and policy types, IAM Access Analyzer, and policy evaluation with explicit denies and permissions boundaries. Includes three original practice questions.

Try the 3 quick checks →
Preview the topics
  • A developer uses the root user’s access keys in a deployment script, because it never hits a permission error. What should the architect do first?
  • AnyCompany Logistics wants a partner account to read objects from one of its S3 buckets, without creating any users for the partner. Which policy, on the AnyCompany side, grants this access?
  • A policy on a role allows every S3 action, and a second policy on the same role denies deleting objects. What happens when the role tries to delete an object?