Assessment: Security and IaC

Explain

• Why is prompt-based authorization unsafe?
• What is least privilege?
• What is the difference between authentication and authorization?
• Why does Terraform state matter?
• How do you separate environments safely?

Build

• Design a secure agent tool permission model.
• Design secret management for an AI app.
• Design Terraform module boundaries.

Debug

• A user can access restricted data. What do you inspect?
• A secret appears in logs. What do you do?
• Terraform wants to destroy resources unexpectedly. What do you check?

Completion Gate

• Can threat model AI systems.
• Can enforce server-side authorization.
• Can structure basic IaC safely.