EC2 - IAM roles lab

Question 1

Role Types

Answer 1

AWS Service Roles, Role for Cross-Account Access, Role for Identity Provider Access

Question 2

When provisioning EC2 instance with IAM role, where do you select the role?

Answer 2

Configure Instance Details (IAM role)

Question 3

When you first use CLI…

Answer 3

You need to configure AWS credentials using access key ID and secret access key, Region

Question 4

Can you assign a role to an EC2 instance after launching it?

Answer 4

Not using console, but can using CLI. You can also modify a role

Question 5

The only way to modify a role attached to an EC2 instance is…

Answer 5

attach a policy

Question 6

If you delete a role attached to the EC2 instance

Answer 6

The role is gone. You cannot add a new role; you must terminate and launch a new instance with desired role

Question 7

Which is more secure, using roles or storing your access key and secret access key on EC2 instances?

Answer 7

Roles; they are also easier to manage

Question 8

T/F: Roles are universal, you can use them in any region.

Answer 8

True