CH2: IAM Flashcards

1
Q

Manage users and their level of access to the AWS Console

A

Identity Access Management

IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

IAM

Centralized control of your

A

AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

IAM

Shared access to your

A

AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

IAM

Gives you Granular

A

Permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

IAM

Identity Federation

A

Active Directory

Facebook

Linkedin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

IAM

Provides temp access as necessary for

A

Users

Devices

Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

IAM

Sets a juggler for your passwords

A

Rotation Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

IAM

Integrates with many different

A

AWS Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

IAM

Supports PCI DSS Compliance

A

For billing purposes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

IAM

End users are

A

Users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

IAM

A collection of users under one set of permissions

A

Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

IAM

These can be created and then assigned to AWS resources

A

Roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

IAM

A document that defines one (or more) permissions.

A

Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Policy Simulator - exam tip

Test IAM Permissions BEFORE you commit them to

A

Prod

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Policy Simulator - exam tip

Validate that the policy works

A

As expected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Policy Simulator - exam tip

Great for troubleshooting because you can test

A

Policies attached to existing users and you suspect the problem is related to AWS IAM.

17
Q

IAM

accessed

A

Universally not by region at this time,

18
Q

IAM

The account created when you first set up your account,

A

Root Account

19
Q

IAM

What type of access does the ROOT account have

A

Complete ADMIN access

20
Q

IAM

When new users are first created they are assigned

A

Access Key ID
–AND–
Secret Access Keys

21
Q

IAM

Access Key ID and Secret Access key are NOT the same as Login to AWS management console

A

You can not use them to log in to the console

22
Q

IAM

You can use these to access AWS via APIs, Command lines and SDK

A

Access Key ID
–AND–
Secret Access Keys

23
Q

IAM

You only get to view these once so if you lose them you have to regenerate new ones - so keep them in secret, keep them safe Gandalf with Frodo….

A

Access Key ID
–AND–
Secret Access Keys

24
Q

IAM

Always set this up on your root account

A

Multifactor Authentication (MFA)

25
Q

IAM

You can create and customize your own

A

Password rotation policies,

26
Q

IAM

Delegates AWS resources access for users, groups or services

A

IAM ROLE

27
Q

IAM

A JSON document that defines one or more permissions

A

IAM Policy

28
Q

IAM

What is the best way to enable your EC2 instance to read files in an S3 bucket?

A

Create an IAM Role with read-access to S3 and assign the role to the EC2 instance,

29
Q

IAM

Allow apps to securely make API requests from instances, without requiring you to manage security credentials that the apps use,

A

IAM Roles

30
Q

IAM

Allows you to manage users, groups and roles and their corresponding level of access to AWS

A

IAM