IAM Role and Temporary Credentials Lab
Trust policies, Permissions policies, STS temporary credentials, Least privilege
No AWS service charge for IAM or STS. Use a sandbox account.AWS Mini Labs
These labs reinforce Study Notes concepts without turning the site into an AWS provisioning tool. Review costs and cleanup before creating resources.
Trust policies, Permissions policies, STS temporary credentials, Least privilege
No AWS service charge for IAM or STS. Use a sandbox account.Buckets and objects, Versioning, Lifecycle rules, Encryption, Cleanup discipline
Negligible for tiny test objects if cleaned up. Lifecycle transitions and retained versions can create charges if left behind.Logs versus metrics, Metric filters, Alarms, Operational evidence
Small log ingestion, metric, and alarm costs can apply. Delete all resources at the end.Execution roles, Invocation, CloudWatch Logs, Timeouts, Handler behavior
Usually Free Tier or negligible for a tiny function. Delete the function and log group.Visibility timeout, Receive count, DLQ redrive policy, Idempotent consumers
Negligible for a few messages. Delete both queues after the lab.Event patterns, Target routing, DLQ planning, Idempotent handling
No resources required if done as a design exercise. Creating rules can generate small charges in busy accounts.Partition keys, On-demand capacity, TTL, Access patterns
A tiny on-demand table has negligible cost when deleted quickly. DynamoDB Free Tier may apply.API Gateway, Lambda, IAM roles, Auth, Logging, Retries
Design-only lab unless you deploy. Deploying API Gateway and Lambda can create small charges.S3 layout, Glue Data Catalog, Partitions, Columnar formats, Query cost
Design-only lab is free. Running Athena queries charges by data scanned.Prompt risk, RAG grounding, Guardrails, Human review, Data handling
Design-only lab is free. Invoking foundation models can create charges.Model documentation, Evaluation, Bias review, Approval workflow
Design-only lab is free. Creating SageMaker resources can create charges.Automation roles, Runbooks, Rate controls, Operational safety
Design-only lab is free. Running automation against resources can change infrastructure and create charges.