Policy evaluation & least privilege
P56.policy-as-code.01 · Audience: guest, it-ml, language-pro · Prerequisites: AuthZ models: RBAC, ABAC, ReBAC
Cloud IAM expresses access as policy documents — statements of effect/principal/action/ resource, often with wildcards. Getting the evaluation right (explicit-deny precedence, default deny) is where systems are won or lost. This track builds the evaluator, then the least-privilege discipline that keeps grants tight.
Ask the mentor about this module
Ask a question about this content. The mentor explains and grounds its answer in what you are studying; asking is recorded as a learning signal, not a grade.
Keeping your files on this device
Off by default. The mentor always gets your file; this only decides whether your own copy stays here. Copies live in this browser only - they do not follow you to another device, and clearing site data removes them.
Rung 1 — a policy evaluator: explicit deny wins
Loading exercise…
Rung 2 — minimise to least privilege
Loading exercise…
My notes on this module
Loading your notes...
Where next?
This module unlocks
Go up a level