--- title: "#iam articles | Hashnode" description: "I blog about building Identity and access solutions and would really like to be able to tag them as such!" url: "https://hashnode.com/tag/iam" --- Tag # #iam 980 posts · 49 followers [Ban Nguyen](https://hashnode.com/@pandev00) · [4d ago](https://hashnode.com/posts/securing-astra-cms-for-humans-and-ai-agents-an-identity-first-approach-to-iam/6aeede02dc1acf31f637b85f) ### [Securing Astra CMS for Humans and AI Agents: An Identity-First Approach to IAM](https://pandev00.com/securing-astra-cms-for-humans-and-ai-agents-an-identity-first-approach-to-iam?utm_source=hashnode&utm_medium=feed) "Hackers don't break in, they log in." That one line from a recent identity-security briefing explains why a CMS that is about to host AI agents needs an identity plan before it needs anything else. T 9 min read · [pandev00.com](https://pandev00.com/securing-astra-cms-for-humans-and-ai-agents-an-identity-first-approach-to-iam?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/securing-astra-cms-for-humans-and-ai-agents-an-identity-first-approach-to-iam/6aeede02dc1acf31f637b85f) [Robin Sishodia](https://hashnode.com/@Sishodia) · [5d ago](https://hashnode.com/posts/protect-the-aws-root-account-and-turn-on-mfa/6aedfc58dd35136e09b1dbbc) ### [Protect the AWS Root Account and Turn on MFA](https://sishodiarobin.hashnode.dev/protect-the-aws-root-account-and-turn-on-mfa?utm_source=hashnode&utm_medium=feed) Every AWS account starts with one identity that can do everything: the root user. IAM policies cannot restrict it, so if someone gets in, there is no safety net. Before building anything else, lock it 3 min read · [sishodiarobin.hashnode.dev](https://sishodiarobin.hashnode.dev/protect-the-aws-root-account-and-turn-on-mfa?utm_source=hashnode&utm_medium=feed) [Robin Sishodia](https://hashnode.com/@Sishodia) · [6d ago](https://hashnode.com/posts/iam-roles-and-temporary-credentials-for-ec2/6aec3d50cc93c75725272768) ### [IAM Roles and Temporary Credentials for EC2](https://sishodiarobin.hashnode.dev/iam-roles-and-temporary-credentials-for-ec2?utm_source=hashnode&utm_medium=feed) On Day 2 I wrote a least-privilege policy for one S3 bucket. The next question is who gets to use it. For people, that's a user or group. For servers and apps, it should be a role, so nothing long-liv 3 min read · [sishodiarobin.hashnode.dev](https://sishodiarobin.hashnode.dev/iam-roles-and-temporary-credentials-for-ec2?utm_source=hashnode&utm_medium=feed) [Yashvi Kothari](https://hashnode.com/@yashvikothari) · [Oct 30](https://hashnode.com/posts/google-cloud-custom-iam-roles-gsp190/6ae4db1971d654b55838149c) ### [How to Lock Down Google Cloud in 9 Steps Using Custom IAM Roles (GSP190 Hands-On Guide)](https://yashvikothari.hashnode.dev/google-cloud-custom-iam-roles-gsp190?utm_source=hashnode&utm_medium=feed) Stop granting broad Editor access. Learn how to create, update, and manage least-privilege custom IAM roles in Google Cloud with YAML & gcloud. 17 min read · [yashvikothari.hashnode.dev](https://yashvikothari.hashnode.dev/google-cloud-custom-iam-roles-gsp190?utm_source=hashnode&utm_medium=feed) [Robin Sishodia](https://hashnode.com/@Sishodia) · [Oct 30](https://hashnode.com/posts/writing-a-custom-iam-policy-from-scratch/6ae502968b490ff90c32fa45) ### [Writing a Custom IAM Policy from Scratch](https://sishodiarobin.hashnode.dev/writing-a-custom-iam-policy-from-scratch?utm_source=hashnode&utm_medium=feed) On Day 1 I used an AWS managed policy (ReadOnlyAccess). It works, but it's broad. Today I wrote my own policy that allows exactly one thing: reading one S3 bucket and nothing else. That's least privil 2 min read · [sishodiarobin.hashnode.dev](https://sishodiarobin.hashnode.dev/writing-a-custom-iam-policy-from-scratch?utm_source=hashnode&utm_medium=feed) [Robin Sishodia](https://hashnode.com/@Sishodia) · [Oct 29](https://hashnode.com/posts/iam-the-front-door-to-everything-in-aws/6ae3527dde36070f7fe3c643) ### [IAM, the Front Door to Everything in AWS](https://sishodiarobin.hashnode.dev/iam-the-front-door-to-everything-in-aws?utm_source=hashnode&utm_medium=feed) Every AWS action, from launching an EC2 instance to reading an S3 object, goes through one question: is this identity allowed to do this? IAM (Identity and Access Management) answers it, so I'm starti 2 min read · [sishodiarobin.hashnode.dev](https://sishodiarobin.hashnode.dev/iam-the-front-door-to-everything-in-aws?utm_source=hashnode&utm_medium=feed) [Prem Choudhary](https://hashnode.com/@prem14choudhary) · [Oct 28](https://hashnode.com/posts/aws-permissions-and-image-storage-with-terraform/6ae1f9c9b0115b7e44bcc60c) ### [AWS Permissions and Image Storage with Terraform](https://prem14choudhary.hashnode.dev/aws-permissions-and-image-storage-with-terraform?utm_source=hashnode&utm_medium=feed) AWS Permissions and Image Storage with Terraform 7 min read · [prem14choudhary.hashnode.dev](https://prem14choudhary.hashnode.dev/aws-permissions-and-image-storage-with-terraform?utm_source=hashnode&utm_medium=feed) [Yashvi Kothari](https://hashnode.com/@yashvikothari) · [Oct 27](https://hashnode.com/posts/configure-iam-permissions-google-cloud-gsp647/6ae0cbae23f0808f5867675b) ### [Google Cloud IAM with gcloud: Complete Hands-On Lab Guide (GSP647)](https://yashvikothari.hashnode.dev/configure-iam-permissions-google-cloud-gsp647?utm_source=hashnode&utm_medium=feed) Learn Google Cloud IAM with gcloud. Manage configurations, assign roles, create service accounts, and deploy Compute Engine VMs in GSP647. 25 min read · [yashvikothari.hashnode.dev](https://yashvikothari.hashnode.dev/configure-iam-permissions-google-cloud-gsp647?utm_source=hashnode&utm_medium=feed) [Yashvi Kothari](https://hashnode.com/@yashvikothari) · [Oct 27](https://hashnode.com/posts/google-cloud-service-accounts-iam-roles-hands-on-lab-gsp199/6ae094defcbefc52360f5329) ### [Google Cloud Service Accounts and IAM Roles: Step-by-Step Hands-On Lab (GSP199)](https://yashvikothari.hashnode.dev/google-cloud-service-accounts-iam-roles-hands-on-lab-gsp199?utm_source=hashnode&utm_medium=feed) Learn to create Google Cloud service accounts, assign IAM roles, configure Compute Engine, and query BigQuery in this hands-on GSP199 guide. 22 min read · [yashvikothari.hashnode.dev](https://yashvikothari.hashnode.dev/google-cloud-service-accounts-iam-roles-hands-on-lab-gsp199?utm_source=hashnode&utm_medium=feed) [Murtuza Lokhandwala](https://hashnode.com/@murtuzalokhandwala) · [Oct 20](https://hashnode.com/posts/authentication-architecture-passkeys-mfa-oauth-2-0-oidc-and-enterprise-sso/6ad717635c1a30ac03fca17a) ### [Authentication Architecture: Passkeys, MFA, OAuth 2.0, OIDC and Enterprise SSO](https://kushalgridprepteam.hashnode.dev/authentication-architecture-passkeys-mfa-oauth-2-0-oidc-and-enterprise-sso?utm_source=hashnode&utm_medium=feed) A practical, vendor-neutral architectural guide to designing modern identity and access management systems. 9 min read · [kushalgridprepteam.hashnode.dev](https://kushalgridprepteam.hashnode.dev/authentication-architecture-passkeys-mfa-oauth-2-0-oidc-and-enterprise-sso?utm_source=hashnode&utm_medium=feed)