Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

aws solutions architect > iam & cli > Flashcards

iam & cli Flashcards

(64 cards)

Start Studying
1
Q

What does IAM stand for?

A

Identity and Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

is IAM a global or region service?

A

global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what is the root account?

A

created by default, shouldn’t be used or shared

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what are users in IAM?

A

are people within your organization, and can be grouped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what do groups in IAM contain?

A

only contain users, not other groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

T/F: Users must belong to groups

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

T/F: Users can belong to multiple groups

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

For IAM Permissions, what are the policies?

A

JSON documents that define permissions for users or groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Who can be assigned the policies?

A

users or groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what are inline policies?

A

policies assigned to a single user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is the least privilege principle?

A

don’t give more permissions than a user/group

needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What do IAM policy structure consist of ?

A

Version, Id, Statement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the Version in IAM policy structure?

A

policy language version, always include “2012-10-17”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the Id in IAM policy structure?

A

an identifier for the policy (optional)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the Statement in IAM policy structure?

A

one or more individual statements (required)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What do IAM policy structure Statements consist of ?

A

Sid, Effect, Principal, Action, Resource, Condition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

what is the Sid for statements?

A

an identifier for the statement (optional)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the Effect in the statement?

A

whether the statement allows or denies access

Allow, Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the Principal in the statement?

A

account/user/role to which this policy applied to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the Action in the statement?

A

list of actions this policy allows or denies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the Resource in the statement?

A

list of resources to which the actions applied to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the Condition in the statement?

A

conditions for when this policy is in effect

optional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

strong passwords result in

A

higher security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what can you set up in password policy?

A 
Set a minimum password length
• Require specific character types:
• including uppercase letters
• lowercase letters
• numbers
• non-alphanumeric characters
• Allow all IAM users to change their own passwords
• Require users to change their password after some time (password expiration)
• Prevent password re-use
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is MFA in aws iam?
password you know and device you know
26
what do you want to protect with MFA?
root account and iam users
27
what is the main benefit of mfa?
if a password is stolen or hacked, the account is not compromised
28
what are the 3 ways to access AWS
AWS Management console AWS CLI AWS SDK
29
what do you need to log in to aws with cli and sdk?
access keys
30
access key id is like the
username
31
secret access key is like the
password
32
what is the aws cli?
open-source tool that enables you interact with aws services using commands in your own cli shell
33
aws cli provides direct access to what?
public apis of aws servies
34
what can you develop with aws cli to manage your resources?
scripts
35
what does aws sdk stand for?
AWS Softwre Development Kit
36
what is aws sdk?
language-spec apis that enables you to access and manage AWS services programatically that can be embeded within your app
37
what languages do aws sdk support
JS, py, PHP, .net, ruby, java, go, nodeJS,c++, mobile sdks, ioT device
38
what are IAM Roles?
aws services you need to perform actions on your behalf to other aws services using permissions
39
what are common IAM roles?
EC2 instance roles, lambda function roles, and role for cloudformation
40
What is IAM credentials report?
report that lists all your account's users and the status of their various credentials
41
What is IAM Access Advisor ?
Access advisor shows the service permissions granted to a user and when those services were last accessed
42
What level is IAM credentials report?
acct level
43
what level is iam access advisor?
user-level
44
what can you use iam access advisor information for/
revise your policies
45
T/F: Dont use the root acct except for AWS acct set up
T
46
One phyiscal user =
1 aws user
47
What is the best practice for assigning users ?
assign users to groups
48
What is the best practice for assigning permissions?
assign permissions to groups
49
T/F: create strong password policy
T
50
T/F: Use and enforce use of MFA
T
51
What do you create and use roles for?
giving permissions to AWS services
52
what do you use Access Keys for?
Programmatic Access (CLI/SDK)
53
how do you audit permissions of acct ?
IAM Credentials Report
54
What should never be shared?
IAM Users & Access Keys
55
what is the Shared Responsibiltiy Model for IAM?
what AWS handles and what the AWS acct owner handles for respons
56
In the Shared Responsibiltiy Model for IAM, what does AWS handle?
Infrastructure (global networkk security), Configuration and vulnerability analysis, and compliance validation
57
In the Shared Responsibiltiy Model for IAM, what does account owner handle?
Users, Groups, Roles, Policies management and monitoring; enable mfa for all accts; rotate keys often; use IAM tools to apply appropriate permissions; analyze access patterns and review permissions
58
Users are maped to
a phyiscal user and has a password for AWS console
59
Groups contain only
users
60
Policies are JSON docs that outlines
permissions for users or groups
61
Roles
for ec2 instances or aws services
62
security
mfa + strong password policy
63
access keys
access aws using cli or sdk
64
audit
iam cred report or iam access advisor

aws solutions architect (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions