IAM & AWS CLI Flashcards

1
Q

3 options to access AWS

A
  1. CLI (Command Line Interface)
  2. SDK (Software Dev Kit)
  3. Management Console
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do you create access keys?

A

AWS Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Are Access Keys managed by AWS or the User?

A

User

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the AWS CLI?

A

Its the command line interface which allows you to interact with AWS cervices using commands.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the AWS CLI?

A

Its the command line interface which allows you to interact with AWS cervices using commands.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Does the CLI have direct access to public APIs of AWS services?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can you develop scripts to manage your resources using the AWS CLI?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AWS SDK?

A

Software Development Kit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is SDK made of?

A

Language-specific APIs (set of libraries)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does SDK lets you do?

A

Enables you to access and manage AWS services programmatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Is SDK embedded within your application?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

SDK Example?

A

CLI is built on AWS SDK for Python

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is CloudShell?

A

It is a terminal in cloud of AWS - Works by Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What do AWS services need to perform actions on your behalf?

A

IAM Roles for Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are IAM roles used by?

A

AWS Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Example

A

You have an EC2 instance that needs access to an AWS service. To do that, you assign an IAM role to the EC2 instance.

17
Q

What are some Common Roles for IAM?

A
  1. EC2 instance Roles
  2. Lambda Function Roles
  3. Roles for CloudFormation
18
Q

How many Security Tools does IAM have?

A

Two

19
Q

What are the IAM Security Tools called?

A
  1. IAM Credentials Report (account - level)
  2. IAM Access Advisor (user - level)
20
Q

What does the AIM Credentials Report IAM tool do?

A

Generates a report that lists all account users and status of their credentials

21
Q

What does the Access Advisor IAM tool do?

A

Shows the service permissions granted to a user and when those services were last accessed.

22
Q

Which IAM tool can you use to revise your policies?

A

Access Advisor IAM tool

23
Q

What IAM tool do you use to see when a service was last accessed by a specific user?

A

Access Advisor IAM tool

24
Q

When using Access Advisor, what can you do if you see that some services were never accessed by a user?

A

Remove their permission to that service

25
Q

True/False - Use Root account only for AWS account Setup

A

True

26
Q

Is one physical user = One AWS user?

A

Yes

27
Q

Can you assign users to groups and permissions to groups?

user -> group then permission -> group

A

Yes

28
Q

What should u use when giving permissions to AWS services?

A

Roles

29
Q

If you want to use CLI or SDK (programmatic access, what should you create and use?

A

Access Keys

30
Q

If you want to use CLI or SDK (programmatic access, what should you create and use?

A

Access Keys

31
Q

How can you audit permissions to your account?

A

IAM Credentials Report & IAM Access Advisor

32
Q

What should Groups contain?

A

Users

33
Q

What are policies made out of?

A

jSON files that outline permissions for users or groups

34
Q

To assign permissions within AWS to EC2 instances or AWS services you need what?

A

To assign Roles

35
Q

How can you enforce security to users?

A
  1. MFA
  2. Password Policy
36
Q

What are Access Keys used for?

A

To access AWS using CLI or SDK