Why So Many Boxes? - Identity vs Permission
frame: The Two Planes - why AWS feels like 100 random things

Badges on one side, the lists of doors they open on the other, and the staples that join any badge to any list.
Before you start. The Two Planes - why AWS feels like 100 random things gave you two guards at AWS’s front door: one checking whether a packet can reach a machine, the other checking whether an identity may do something - a badge, and a checklist of doors stapled to it. This lesson opens that badge and that checklist, and asks why AWS keeps four separate boxes for them instead of one.