← Blog

Writing archive

Blog page 29

Older notes, lessons, and series entries from the growing technical library.

Archive

Posts page 29

Showing 1,345-1,392 of 1,446

2 min readSeries: AWS from Zero · Part 102

Delete an old IAM policy version

Remove one non-default managed policy version after verifying it is no longer needed.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 101

List IAM managed policy versions

Review every stored policy version and identify the active default.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 100

Create a new IAM managed policy version

Update a customer managed policy by creating and selecting a new default version.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 99

Detach a managed policy from an IAM user

Remove one direct managed-policy attachment and verify it is absent.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 98

Attach a managed policy to an IAM user

Attach one customer managed policy to a user and verify the direct attachment.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 97

Read an IAM managed policy document

Resolve a managed policy's default version ID and retrieve its JSON permissions document.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 96

Inspect IAM managed policy metadata

Read a managed policy's ARN, path, attachment count, update time, and default version.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 95

Create a customer managed IAM policy

Create a reusable customer managed policy from a validated JSON document.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 94

Understand IAM policy JSON anatomy

Build and validate a small identity policy with Version, Statement, Effect, Action, and Resource.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 93

List inline policies on an IAM user

List inline policy names and retrieve one embedded policy document.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 92

List managed policies attached to an IAM user

Return the names and ARNs of managed policies directly attached to one user.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 91

Distinguish IAM managed and inline policies

List attached managed policies and inline policy names for the same IAM user.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 90

Remove an IAM user from a group safely

Remove group membership, verify both resources, and delete an empty demo group.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 89

List every group for an IAM user

Inspect all IAM group memberships for one user.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 88

Add an IAM user to a group

Add one IAM user to a group and verify the membership from both directions.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 87

Create an IAM user group

Create an IAM group that can later receive shared permission policies.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 86

Query IAM user tags

Filter IAM user tags and return one tag value with JMESPath.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 85

Tag an IAM user

Add ownership and environment tags to an existing IAM user.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 84

Create an IAM user without credentials

Create a bare IAM user from the CLI without a console password or access key.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 83

Inspect one IAM user

Retrieve one IAM user's ARN, path, stable ID, creation date, and password-use timestamp.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 82

List IAM users in an AWS account

List IAM user names, ARNs, paths, and creation dates with a compact CLI query.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 81

Read your AWS caller identity deeply

Interpret the account, user ID, and ARN returned by STS get-caller-identity.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 80

Build a private S3 backup bucket from the CLI

Combine naming, encryption, versioning, public-access blocking, lifecycle, upload, verification, and cleanup.

#aws#cli#s3#storage#project#security
2 min readSeries: AWS from Zero · Part 79

Restore an archived S3 object temporarily

Request a temporary restore of an S3 Glacier Flexible Retrieval object and inspect progress.

#aws#cli#s3#storage#archive#cost
2 min readSeries: AWS from Zero · Part 78

List every incomplete S3 multipart upload

Inventory unfinished multipart uploads with their keys, upload IDs, owners, and start times.

#aws#cli#s3#storage#operations#cost
2 min readSeries: AWS from Zero · Part 77

Apply an S3 Object Lock legal hold

Turn a legal hold on for one object version and verify its state.

#aws#cli#s3#storage#security#compliance
2 min readSeries: AWS from Zero · Part 76

Set default S3 Object Lock retention

Configure a short Governance-mode default retention rule for new object versions.

#aws#cli#s3#storage#security#compliance
2 min readSeries: AWS from Zero · Part 75

Create an S3 bucket with Object Lock

Create a new versioned bucket with Object Lock enabled at creation time.

#aws#cli#s3#storage#security#compliance
2 min readSeries: AWS from Zero · Part 74

Audit an S3 replication configuration

Inspect replication role, rule priorities, filters, destinations, and delete marker behavior.

#aws#cli#s3#storage#replication
2 min readSeries: AWS from Zero · Part 73

Create a basic S3 replication rule

Apply a versioned S3 replication configuration using an existing replication role.

#aws#cli#s3#storage#replication#versioning
2 min readSeries: AWS from Zero · Part 72

Prepare S3 buckets for replication

Enable versioning on source and destination buckets before adding an S3 replication rule.

#aws#cli#s3#storage#replication#versioning
2 min readSeries: AWS from Zero · Part 71

Inspect S3 event notification configuration

Read all Lambda, SQS, SNS, and EventBridge notifications configured on a bucket.

#aws#cli#s3#storage#events
2 min readSeries: AWS from Zero · Part 70

Configure S3 Storage Class Analysis

Create an analytics configuration that studies access patterns under one prefix.

#aws#cli#s3#storage#analytics#cost
2 min readSeries: AWS from Zero · Part 69

Enable S3 request metrics for a bucket

Create an S3 metrics configuration for the whole bucket and inspect it.

#aws#cli#s3#storage#observability#cloudwatch
2 min readSeries: AWS from Zero · Part 68

List and inspect S3 Inventory configurations

Audit the inventory jobs configured on an S3 bucket.

#aws#cli#s3#storage#operations
2 min readSeries: AWS from Zero · Part 67

Create an S3 Inventory configuration

Define a daily CSV inventory of current object versions for a source bucket.

#aws#cli#s3#storage#operations
2 min readSeries: AWS from Zero · Part 66

Use the S3 accelerated endpoint from AWS CLI

Configure an AWS CLI profile to use S3 Transfer Acceleration and test an upload.

#aws#cli#s3#storage#performance#cost
2 min readSeries: AWS from Zero · Part 65

Enable S3 Transfer Acceleration

Turn on S3 Transfer Acceleration for a compatible bucket and verify its status.

#aws#cli#s3#storage#performance#cost
2 min readSeries: AWS from Zero · Part 64

Call a Requester Pays S3 bucket

Use the request-payer option for listing and downloading from a Requester Pays bucket.

#aws#cli#s3#storage#cost
2 min readSeries: AWS from Zero · Part 63

Enable Requester Pays on an S3 bucket

Configure Requester Pays and understand which requests require an explicit requester flag.

#aws#cli#s3#storage#cost
2 min readSeries: AWS from Zero · Part 62

Inspect S3 server access logging status

Read the current logging destination and prefix for an S3 bucket.

#aws#cli#s3#storage#observability
2 min readSeries: AWS from Zero · Part 61

Enable S3 server access logging safely

Configure a source bucket to deliver server access logs into a dedicated destination bucket.

#aws#cli#s3#storage#observability
2 min readSeries: AWS from Zero · Part 60

Remove S3 static website configuration

Delete the website subresource and verify that a bucket is no longer configured for website hosting.

#aws#cli#s3#storage#web
2 min readSeries: AWS from Zero · Part 59

Create an S3 website redirect object

Upload a zero-byte object that redirects S3 website requests to another path.

#aws#cli#s3#storage#web
2 min readSeries: AWS from Zero · Part 58

Add an S3 website error document

Configure index and error documents together for an S3 website endpoint.

#aws#cli#s3#storage#web
2 min readSeries: AWS from Zero · Part 57

Configure an S3 static website index

Set an index document for S3 static website hosting and inspect the website configuration.

#aws#cli#s3#storage#web
2 min readSeries: AWS from Zero · Part 56

Use S3 sync delete without surprises

Preview how sync --delete removes destination objects that are absent locally.

#aws#cli#s3#storage
2 min readSeries: AWS from Zero · Part 55

Filter a recursive S3 copy

Copy a directory recursively while excluding everything except selected file patterns.

#aws#cli#s3#storage