Zero-trust IAM architecture on AWS — least-privilege policies, ABAC with principal tags, permission boundaries, SCPs, and automated misconfiguration detection via IAM Access Analyzer.
-
Updated
Oct 20, 2026
Zero-trust IAM architecture on AWS — least-privilege policies, ABAC with principal tags, permission boundaries, SCPs, and automated misconfiguration detection via IAM Access Analyzer.
Hands-on AWS project implementing KMS encryption, S3 bucket policies, encrypted RDS, and automated Secrets Manager rotation — demonstrating real cloud security & compliance practices.
Built a layered AWS network security perimeter: Secure VPC, NACLs, Security Groups, WAF (OWASP rules), Network Firewall, VPC Flow Logs + Athena threat queries & Shield Standard. Project 2/5.
To associate your repository with the group-aws-security topic, visit your repo's landing page and select "manage topics."