Using AWS CloudFormation for IaC. Documentation here. Summary of key points:

• Configuration comes as a template usually in YaML format, which creates a stack that bundles services together. changesets marking modifications between templates can be generated.

CloudFormation policies

Creating an S3 bucket... a couple of TODOs:

1. IAM:
   • Create a user group: Name, Users, Permission policies.
   • Create a user: Name, Permissions.
   • A specific permission policy can be created as well, under Policies.

Some comments:

• Role-based access is available from IAM: authentication using PKI, by creating CA from within AWS and (probably) issuing certificates to devices which can be used to request for access.