--- title: "#aws-iam articles | Hashnode" description: "Explore 274 articles tagged #aws-iam on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/aws-iam" --- Tag # #aws-iam 274 posts · 15 followers [Sulakshana Karunarathne](https://hashnode.com/@sulaa29) · [Oct 15](https://hashnode.com/posts/catching-over-permissive-iam-in-the-pull-request/6ad0d4e2bd52b4e4b431f0bd) ### [Catching over-permissive IAM in the pull request, not in production](https://devseccloud.hashnode.dev/catching-over-permissive-iam-in-the-pull-request?utm_source=hashnode&utm_medium=feed) Why I built Cloud Policy Guard: a small Python CLI that reads a Terraform plan, scores IAM risk, and fails the pipeline before a wildcard policy ever reaches AWS. 3 min read · [devseccloud.hashnode.dev](https://devseccloud.hashnode.dev/catching-over-permissive-iam-in-the-pull-request?utm_source=hashnode&utm_medium=feed) [Marc Wojcik](https://hashnode.com/@thecgaigroup) · [Oct 8](https://hashnode.com/posts/bedrock-managed-agents-openai-aws-preview/6ac7f2b1ea80816919518865) ### [Bedrock Managed Agents: OpenAI Inside AWS](https://blog.thecgaigroup.com/bedrock-managed-agents-openai-aws-preview?utm_source=hashnode&utm_medium=feed) AWS and OpenAI move the agent runtime into the customer account. What the preview proves, and what it doesn't. 13 min read · [blog.thecgaigroup.com](https://blog.thecgaigroup.com/bedrock-managed-agents-openai-aws-preview?utm_source=hashnode&utm_medium=feed) [Muhammed Abdulakeem Akinpelumi](https://hashnode.com/@muhakeem) · [Oct 2](https://hashnode.com/posts/building-an-event-driven-image-thumbnail-application/6ac010a703842a5179cb28e1) ### [Building an Event-Driven Image Thumbnail Application](https://muhakeem.hashnode.dev/building-an-event-driven-image-thumbnail-application?utm_source=hashnode&utm_medium=feed) One of the things I have been enjoying about learning cloud computing is seeing how different AWS services can work together to solve a practical problem. I recently completed a hands-on lab on AWS La 7 min read · [muhakeem.hashnode.dev](https://muhakeem.hashnode.dev/building-an-event-driven-image-thumbnail-application?utm_source=hashnode&utm_medium=feed) [Adeshina Emmanuel](https://hashnode.com/@emmanueladeshina01) · [Sep 13](https://hashnode.com/posts/how-aws-actually-evaluates-iam-policies-identity-vs-resource/6aa6ab4a28c6fb8953d4bf60) ### [How AWS Actually Evaluates IAM Policies (Identity vs Resource)](https://eadeshina.hashnode.dev/how-aws-actually-evaluates-iam-policies-identity-vs-resource?utm_source=hashnode&utm_medium=feed) How AWS evaluates IAM policies: implicit deny, explicit deny priority, and the union of identity-based and resource-based policies in the same account 7 min read · [eadeshina.hashnode.dev](https://eadeshina.hashnode.dev/how-aws-actually-evaluates-iam-policies-identity-vs-resource?utm_source=hashnode&utm_medium=feed) [joyce foster](https://hashnode.com/@Joycefoster642) · [Sep 7](https://hashnode.com/posts/aws-iam-for-beginners-understanding-users-groups-roles-and-policies/6a9ee88a2c6f80b922d1e070) ### [AWS IAM for Beginners: Understanding Users, Groups, Roles, and Policies.](https://techbreakdown.hashnode.dev/aws-iam-for-beginners-understanding-users-groups-roles-and-policies?utm_source=hashnode&utm_medium=feed) My first-person walkthrough of AWS IAM. From root account mistakes to mastering Users, Groups, Roles & Policies for real cloud security. 10 min read · [techbreakdown.hashnode.dev](https://techbreakdown.hashnode.dev/aws-iam-for-beginners-understanding-users-groups-roles-and-policies?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/aws-iam-for-beginners-understanding-users-groups-roles-and-policies/6a9ee88a2c6f80b922d1e070) [Manu Shukla](https://hashnode.com/@mr-manushukla) · [Aug 22](https://hashnode.com/posts/dynamodb-streams-abac-shipped-19-august-2026-with-a-7-day-opt-out-and-a-policy-trap/6a89371b3ed2eb1caa0a58cb) ### [DynamoDB Streams ABAC shipped 19 August 2026 with a 7-day opt-out and a policy trap](https://ecorpit.hashnode.dev/dynamodb-streams-abac-shipped-19-august-2026-with-a-7-day-opt-out-and-a-policy-trap?utm_source=hashnode&utm_medium=feed) DynamoDB Streams ABAC shipped 19 August 2026 with a 7-day opt-out and a policy trap Summary. AWS announced attribute-based access control (ABAC) for Amazon DynamoDB Streams on 19 August 2026, in all c 14 min read · [ecorpit.hashnode.dev](https://ecorpit.hashnode.dev/dynamodb-streams-abac-shipped-19-august-2026-with-a-7-day-opt-out-and-a-policy-trap?utm_source=hashnode&utm_medium=feed) [Madhumita C](https://hashnode.com/@madhumita24) · [Aug 20](https://hashnode.com/posts/aws-iam-understanding-users-roles-and-permissions/6a870413a60a7167e9d9958d) ### [AWS IAM: Understanding Users, Roles and Permissions](https://madhumitatech.hashnode.dev/aws-iam-understanding-users-roles-and-permissions?utm_source=hashnode&utm_medium=feed) Learn AWS IAM basics, including users, groups, roles, policies, permissions, security, and real-world cloud applications. 7 min read · [madhumitatech.hashnode.dev](https://madhumitatech.hashnode.dev/aws-iam-understanding-users-roles-and-permissions?utm_source=hashnode&utm_medium=feed) [Rutuja Gophane](https://hashnode.com/@rutujaa07) · [Aug 8](https://hashnode.com/posts/aws-iam-service/6a76dd6db6290a9f6e130898) ### [AWS IAM SERVICE](https://linuxhubwithrutuja.hashnode.dev/aws-iam-service?utm_source=hashnode&utm_medium=feed) IAM(Access Management )Service Information: Every core concept, feature, example, and diagram you need to actually understand AWS Identity and Access Management — from first principles to real product 10 min read · [linuxhubwithrutuja.hashnode.dev](https://linuxhubwithrutuja.hashnode.dev/aws-iam-service?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Jul 18](https://hashnode.com/posts/fam-ctf-the-cloud-writeup/6a5b6b5449cace9813608bfd) ### [FAM CTF : The Cloud writeup](https://exploitnotes.hashnode.dev/fam-ctf-the-cloud-writeup?utm_source=hashnode&utm_medium=feed) Exploit SSRF to bypass IMDS filtering, steal AWS IAM role creds, abuse SigV4 presigned URLs, bypass VPC S3 policy, and capture the FAM flag 7 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/fam-ctf-the-cloud-writeup?utm_source=hashnode&utm_medium=feed) [Adeshina Emmanuel](https://hashnode.com/@emmanueladeshina01) · [Jun 13](https://hashnode.com/posts/aws-iam-attack-paths-how-real-cloud-breaches-actually-happen/6a2d6b77df56b3ae25b12892) ### [AWS IAM Attack Paths: How Real Cloud Breaches Actually Happen](https://eadeshina.hashnode.dev/aws-iam-attack-paths-how-real-cloud-breaches-actually-happen?utm_source=hashnode&utm_medium=feed) Learn how attackers exploit AWS IAM trust relationships, AssumeRole, PassRole, and misconfigurations to escalate privileges and compromise cloud env. 5 min read · [eadeshina.hashnode.dev](https://eadeshina.hashnode.dev/aws-iam-attack-paths-how-real-cloud-breaches-actually-happen?utm_source=hashnode&utm_medium=feed)