Week 5 Worklog

Objectives of Week 5:

  • Learn about the AWS Shared Responsibility Model.
  • Study AWS Identity and Access Management (IAM).
  • Practice user, group, and permission management in AWS.
  • Learn authentication, authorization, and encryption key management mechanisms in AWS.
  • Explore AWS services for centralized administration and security.
  • Analyze the business requirements of the Group Expense Management System.
  • Identify the main features and project scope.
  • Draft the overall system architecture to be deployed on AWS.

Tasks for This Week:

Day Tasks Start Date End Date References
Mon - Study the AWS Shared Responsibility Model
- Learn AWS IAM:
  + Root Account
  + IAM User
  + IAM Group
  + IAM Policy
  + IAM Role
- Practice:
  + Create IAM Groups and IAM Users
  + Create IAM Roles
  + Assume Roles
- Analyze the business requirements of the Group Expense Management System.
- Identify the main functional modules of the system.		 15/06/2026 15/06/2026 https://cloudjourney.awsstudygroup.com/
https://byvn.net/PcQc
Tue - Learn IAM authorization mechanisms
- Study IAM Conditions:
  + IP Address restriction
  + Time-based access restriction
- Practice:
  + Create EC2 Administrator User
  + Create RDS Administrator User
  + Create Administrator Group
  + Configure Switch Role
- Design the Use Case Diagram.
- Identify actors and major business workflows.		 16/06/2026 16/06/2026 https://cloudjourney.awsstudygroup.com/
https://byvn.net/PcQc
Wed - Learn Permission Boundary
- Study the Least Privilege Principle
- Practice:
  + Create restricted IAM Policies
  + Create limited IAM Users
  + Verify restricted user permissions
- Analyze the AWS deployment architecture.
- Select appropriate AWS services for the system.		 17/06/2026 17/06/2026 https://cloudjourney.awsstudygroup.com/
https://byvn.net/PcQc
Thu - Learn Access Keys and AWS CLI Authentication
- Learn IAM Roles for Amazon EC2
- Study Amazon Cognito:
  + User Pool
  + Identity Pool
- Practice:
  + Authenticate using Access Keys
  + Attach IAM Roles to EC2
- Design the high-level system architecture.
- Identify Frontend, Backend, and Cloud components.		 18/06/2026 18/06/2026 https://cloudjourney.awsstudygroup.com/
https://byvn.net/PcQc
Fri - Learn AWS Organizations
- Learn Service Control Policies (SCP)
- Learn AWS Identity Center (SSO)
- Learn AWS KMS and Customer Managed Keys (CMK)
- Learn AWS Security Hub and AWS security best practices
- Prepare for MongoDB Atlas database design and Backend architecture implementation in Week 6.		 19/06/2026 19/06/2026 https://cloudjourney.awsstudygroup.com/
https://byvn.net/PcQc

Week 5 Achievements:

  • Understood the AWS Shared Responsibility Model and the responsibilities between AWS and customers.

  • Understood the architecture and access management mechanism of AWS IAM.

  • Learned the key IAM components:

    • Root Account
    • IAM User
    • IAM Group
    • IAM Policy
    • IAM Role

  • Understood the Least Privilege Principle.

  • Understood Explicit Deny and IAM Policy evaluation order.

  • Learned how to use IAM Conditions to control access:

    • IP Address restriction
    • Time-based access restriction

  • Understood the Assume Role and Switch Role mechanisms in AWS.

  • Learned the purpose and usage of Permission Boundaries for limiting IAM User permissions.

  • Understood Access Key authentication and its associated security risks.

  • Understood the advantages of using IAM Roles for EC2 instead of Access Keys.

  • Learned the functionality of Amazon Cognito:

    • User Pool
    • Identity Pool

  • Understood how to manage multiple AWS accounts using AWS Organizations.

  • Learned the role of Service Control Policies (SCP) in centralized governance.

  • Understood Single Sign-On (SSO) using AWS Identity Center.

  • Learned how to manage encryption keys using AWS KMS and Customer Managed Keys (CMK).

  • Understood the security monitoring and compliance capabilities of AWS Security Hub.

  • Completed hands-on labs:

    • Create IAM Users and IAM Groups
    • Create IAM Roles and Assume Roles
    • Create EC2 and RDS administrator users
    • Configure IAM Conditions
    • Configure Switch Roles
    • Create Permission Boundaries
    • Authenticate using Access Keys
    • Attach IAM Roles to EC2

  • Gained the ability to design and implement identity and access management models on AWS.

  • Completed the business requirement analysis for the Group Expense Management System.

  • Identified the core features of the system:

    • Group management
    • Member management
    • Expense management
    • Balance tracking
    • Statistics and reporting

  • Completed the Use Case analysis and major business workflows.

  • Designed the high-level AWS system architecture.

  • Identified the overall deployment model, including the Frontend, Backend, and Cloud infrastructure.

  • Prepared for MongoDB Atlas database design and Backend architecture development.