Cloud Identity & Access (IAM) From First Principles

Cloud IAM is the foundation of cloud security, deciding who can do what. IAM answers one question for every request: is THIS identity allowed to perform THIS action on THIS resource, yes or no? To get it right, start from DENY and grant access explicitly. This is the single most important IAM rule.