IAM

Question 1

IAM

Answer 1

Identity and Access Managment

Question 2

What the IAM contain?

Answer 2

👉🏼Root
👉🏼Users
👉🏼Groups

*User don’t have to belong to a group and user can belong to multiple groups

Question 3

How can i assign permissions?

Answer 3

👉🏼 JSON file - called policies

Question 4

IAM policies structureWhat is “version”?

Answer 4

Version: policy language version, always include “2012-10-17”

Question 5

IAM policies structureWhat is “ID”?

Answer 5

ID: an identifier for policy (optional)

Question 6

IAM policies structureWhat is “Statement”?

Answer 6

One or more individual statement (required)

Question 7

IAM policies structureExplain what does statement contain?1. Sid2. Effect3. Principal4. Action5. Resource6. Condition

Answer 7

• Sid: an identifier for the statement (optional) • Effect: whether the statement allows or denies access (Allow, Deny) • Principal: account/user/role to which this policy applied to • Action: list of actions this policy allows or denies • Resource: list of resources to which the actions applied to • Condition: conditions for when this policy is in effect (optional)

Question 8

MFA

Answer 8

Multi Factor Authentication

Question 9

CLI

Answer 9

Command Line Interface

Question 10

SDKWhat kind of protection?

Answer 10

Software Developer KitFor code - protect by access key 🔐

Question 11

From where to generate an access key?Who mange them?Two parts of them?

Answer 11

Generated through the AWS consoleUser management their own access keyTwo parts:1. Access key ID = username 🧑‍💻2. Secret access key = password🤫

Question 12

What can i do with the AWD CLI?

Answer 12

👉🏼Tool that enables you to interact with AWS service using commands in your command line shell
👉🏼 Direct access to the public APIs of AWS services
👉🏼Use to develop scripts to manage your resources
👉🏼Open source
👉🏼 Alternative to using AWS Management console

Question 13

SDK

Answer 13

Software Development Kit

Question 14

Two IAM security tools to log your system:📝 ⚙️

Answer 14

1. IAM Credentials Report (account-level): Lists all your account’s users and the status of their various credentials
2. IAM Access Advisor (user-level):

👉️ Shows the service permissions granted to a user and when those services were last accessed.

👉️ You can use this information to revise your policies.

Question 15

What is ROLES in AWS?

Answer 15

Permissions that assign to AWS services with IAM ROLE For EC2 instance or AWS service