04 · Infrastructure as CodeLab 24 / 59
Challengeterraform
IAM Roles, IRSA Policies & Security Groups — Challenge
Give the cluster, the nodes and the build server exactly the permissions each needs and nothing more.
- Time
- 15 min
- Level
- Intermediate
- Objectives
- 4 objectives
- Cost
- Low cost
Where this fits in the platform
This lab adds
- IAM roles, the OIDC provider and IRSA — no static keys in pods
Before you start
Cost — Low cost
— IAM roles, policies and security groups cost nothing. Only the resources they are attached to do.
The goal#
Build IAM Roles, IRSA Policies & Security Groups yourself, starting from an empty directory, without following the guided steps.
Everything you need is in the criteria above. Work down them one at a time, and verify each before moving to the next.
Hands-on environment
Run it on AWS
This lab builds real cloud infrastructure, so it needs your own AWS account. Follow the cost and cleanup notes above — the resources are yours, and so is the bill.
Anything you tick here is your own record. EgyKode cannot see inside that terminal, so the success criteria stay self-assessed even when the environment checks your work for you.
Rules#
- Do not open the guided lab until you have genuinely tried.
- When something fails, read the error before you search. The error message is the lesson.
- Tear down anything billable as soon as you finish.
If you get stuck#
The guided lab is one click away at the bottom of this page. Using it is not failure — coming back and repeating the challenge afterwards is the point.
You are done when
0 of 4
The concept behind it
Next up
Lab 24 of 59 on the project path