• Actions, Resources, and Condition Keys for AWS Services
• IAM Identifiers

Who am I & what am I authorized to do?

$ aws sts get-caller-identity
$ aws iam get-account-authorization-details

AWS Vault

• https://github.com/99designs/aws-vault
• https://99designs.com.au/tech-blog/blog/2015/10/26/aws-vault/

AWS Vault is a tool to securely store and access AWS credentials in a development environment.

AWS Vault stores IAM credentials in your operating system's secure keystore and then generates temporary credentials from those to expose to your shell and applications. It's designed to be complementary to the AWS CLI tools, and is aware of your profiles and configuration in ~/.aws/config.