Status: IN
VPC network controls and IAM identity controls operate as independent security planes — a gap in either is exploitable regardless of the other — meaning both must be hardened to achieve defense in depth.
JSON