
An IAM role is assumed by a principal for a limited session
Read trust, caller and session policies separately, then run a local model that distinguishes resource permission limits from a temporary session expiration.
Foundation
The journal / Ideas in progress
Engineering & everyday learningSoftware, systems, and the things I’m learning along the way. From first principles to AI in production.
Find something to readA little theory. A lot of practice.