
IAMOps covers the design and day-to-day operation of authorisation: least privilege, RBAC, ABAC and ReBAC models, AWS IAM policies, roles, conditions and evaluation logic, permissions boundaries, access analysis, policy as code with OPA and Cedar, and replacing long-lived keys with temporary credentials.