Practice Hub / Tools / IAM Policy and Privilege Simulator
Which roles may a developer pass?
Scope a developer's iam:PassRole in Northgate's dev account so they can deploy their own functions and can no longer hand the build role to a new instance.
Included with any paid plan
Open this scenario with any paid plan
Predict how AWS IAM, Azure RBAC or Microsoft Entra roles will decide a request, then fix the policies until the required access is allowed, the rest is denied and every escalation path is broken.
Your work saves to your account as you go, and downloads as files you keep.
From the course
Every course opens with a free module you can read in full, no account needed.