The Absolute Minimum Every Developer Must Know about AWS Security (cloudyali.io)

It is critical to understand that almost anything in the cloud can assume an identity. Resources can have direct and indirect relationships, some of which are not obvious.