Hackforge Academy

Explanation

IAM controls access to AWS resources and defines which actions users and applications can perform.

Code:

iam_concepts = ['Users', 'Roles', 'Policies', 'Permissions']
print(iam_concepts)

Explanation

Grant an application only the permissions it needs to complete its task.

Code:

permissions = {'service': 'S3', 'action': 'GetObject', 'resource': 'reports/*'}
print(permissions)

Explanation

An EC2 IAM role lets Python access AWS services without storing long-term access keys on the server.

Code:

import boto3
s3 = boto3.client('s3')
print(s3.list_buckets())

Explanation

Do not place AWS access keys in Python source code or commit them to Git repositories.

Code:

import os
region = os.getenv('AWS_REGION', 'ap-south-1')
print(region)

Explanation

An IAM policy can restrict a Python application to a specific S3 action and resource.

Code:

policy = {'Effect': 'Allow', 'Action': ['s3:GetObject'], 'Resource': 'arn:aws:s3:::reports/*'}
print(policy)