Break-glass

Properties: VII Reversible before risky, VIII Escalate the judgment
Goal: TODO
Done when: TODO
Restart from: lesson 6 (the lesson whose checkpoint to reload if this one breaks)
Mode: self-paced or live · about 30 min

closes P9

Watch

TODO: video

hands-on self-paced live

The grant is a temporary Identity Center assignment whose policy carries an aws:CurrentTime condition, so the cloud ends the access with no job alive. The max TTL is two hours, a constant in access/baseline/ that a tflint rule enforces. A scheduled cleanup removes the artifact. The watch flags leftovers (decision 37).
The approver is the reviewer of the break-glass PR, and the apply job copies that identity into the grant’s tags. With the code host down the fallback is a CLI confirmation by a second human. Revocation never depends on either gate.
Killing the cleanup mid-grant still ends access at the TTL.

TODO: Video script or link. Optional.

TODO: Numbered steps. Imperative. One job.

TODO: What Floci or your own machine can and cannot show.

TODO: What the room sees. Timing. The line to say.