Just studying with Claude here and got a little too excited about a cheat sheet . ... title: "AWS Security & Storage — Actually Explained" tags: aws, cloud, devops, beginners No corporate speak. No filler. Just what these things do and when to reach for them. 🎥 AWS Config — The Security Camera That Never Blinks Imagine a security camera pointed at your AWS resources, taking a snapshot every time something changes. That's Config. Your S3 bucket was private Monday, public Tuesday — Config caught both states, logged the diff, and knows exactly who did it. You can add rules like "S3 buckets must never be public." Break the rule, get flagged as non-compliant. This is called drift detection — your resource wandered away from desired state, and Config is the auditor that noticed. Config doesn't prevent changes (that's IAM and SCPs). It records and evaluates them.…