Building the Infrastructure Base
摘要
I spent way too much time and effort trying to wrap my mind around AWS IAM. I started with the wrong expectations. In this book, I’m going to simplify things for you and help you avoid the same mistakes I made. I initially thought IAM would be similar to real life, where you have an organization with a set of roles, and each role has a set of permissions. For example, in an organization, a CTO might have access to a bank account. This approach is known as RBAC—Role-Based Access Control. By the way, Kubernetes uses this approach. But not AWS!