Skill · Cloud · Grant minimal cloud access, to humans and workloads alike
Grant a human identity minimal, temporary and audited cloud permissions
Grant a human identity minimal cloud permissions: IAM components, writing a least-privilege policy, predicting how a permission is evaluated, temporary credentials for the command line, and access traceability required and designed into the model.
Start lesson 1The Cloud domain
- 5 lessons
- ~2 h 25 of reading
- 5 quizzes
- 0 proof lab
The path
Where it comes from, where it leads
What you need to know first, where you stand on this skill, and what it opens next. Your status is computed in your browser, from what you have read and passed.
Before · no prerequisite
A foundation skill: you can start right away.
Recommended before · 2
This skill, for you
Grant a human identity minimal, temporary and audited cloud permissions
Computing
It unlocks · 3 skills
- Design a cloud environment's identity and access model with no imposed provider: federation, separation of duties, access lifecycle and traceability requirements
- Organize a multi-team cloud environment: separate accounts, guardrails as code and tagging
- Let a workload reach a cloud service with no long-lived credential on disk
The path through the foundations From the most upstream foundation to this skill: what is in place, what remains to read.
Lessons
How to learn it
5 lessons, about ~2 h 25, in program order. Each lesson ends with its quiz.
The program
5 lessons · ~2 h 25
Part 1 · Identités humaines et droits (in French) 4 lessons · ~1 h 55
- 1Sécurité cloud : par où commencer et dans quel ordre (in French)· 25 min
- 2IAM : gérer les identités et permissions dans le cloud (in French)· 35 min
- 3Le moindre privilège appliqué : écrire des policies et prédire l'évaluation (in French)· 30 min
- 4Identifiants temporaires et accès en ligne de commande dans le cloud (in French)· 25 min
Part 2 · Pratiquer sans compte (in French) 1 lesson · ~30 min
Beyond the lessons
Assess, practise, pass the proof
Reading a lesson confirms nothing. A skill is confirmed by a passed quiz, practised in a guided lab, and put to the test by a challenge or a mission; an imported lab result is not verified by the site.
Assess yourself
5 quizzes
At the end of the lessons: passed at 70%, they confirm the skill.
Practice
No guided lab
No guided lab practices it yet.
Proof
No proof
Neither a challenge nor a mission with a proof yet.
Placement test
Preparing the questions…
Your answers in detail
For each question asked: your answer, the correct answer, its explanation and the page to reread.
Around it
Who requires it, who teaches it
Required by
Taught by
Same block · Grant minimal cloud access, to humans and workloads alike