design cloud identity and access, covering federation and single sign-on for human access, role and permission-set structure with least privilege, permission boundaries and their interaction with organization-level denies, workload identity that removes static access keys, cross-account trust and it
design cloud identity and access, covering federation and single sign-on for human access, role and permission-set structure with least privilege, permission boundaries and their interaction with organization-level denies, workload identity that removes static access keys, cross-account trust and its direction, standing and privileged access findings, break-glass with storage and alerting, and acc