Hands-on playbook · 45 min
Sonrai Playbook: Cloud Permissions Firewall Baselines, SCP Budgets, Permissions on Demand and an Emergency Stop
A hands-on Sonrai Cloud Permissions Firewall guide checked against Sonrai's public documentation and AWS Organizations limits: the documented baseline order, how Protect decides who keeps access, SCP space and the management-account gap, GraphQL reporting, on-demand approvals, and a rehearsed emergency stop.
- The baseline order Sonrai documents, starting with break-glass exemptions
- How Protect keeps access only for identities active in the last 90 days, tested in code
- SCP budgets: 10,240 characters and 10 policies per target, and what SCPs never touch
- Zombie quarantine without deleting identities
- Permissions on Demand timings: 15-minute dedupe, one-hour escalation, 24-hour expiry
- GraphQL tokens and audit queries, and the emergency stop runbook
- A 90-day rollout and a locked-out-at-3am interview drill
- 01Under the hood
- 02Hands-on lab
- 03Recipes
- 04Rollout runbook
- 05Troubleshooting
- 06Interview drill
- 07Sources
Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, hands-on tool playbooks, the complete practice-test bank, and the downloadable security field guides.
6 months · One payment · No auto-renewal
An independent playbook for interview preparation and learning. AISecurityInterviews is not affiliated with or endorsed by Sonrai Security, and product names are trademarks of their owners. Use these procedures only on systems you own or are authorised to test, and check the vendor's documentation before changing production.