Section 25: Idenity and Access Management Advanced

Question 1

A policy to restrict users and roles across accounts

Answer 1

Service Control Policies

Question 2

aws:SourceIP IAM condition use

Answer 2

restricts the client IP from which the API calls are being made

Question 3

aws:RequestedRegion IAM condition use

Answer 3

Restricts the region

Question 4

aws:ec2 ResourceTag IAM condition use

Answer 4

restricts based on tags

Question 5

aws:MultiFactorAuthPresent IAM condition use

Answer 5

Forces MFA

Question 6

What type of policy is used for event bridge to target Lambda?

Answer 6

Resource

Question 7

What type of policy is used for event bridge to target S3?

Answer 7

Resource

Question 8

What type of policy is used for event bridge to target SQS?

Answer 8

Resource

Question 9

What type of policy is used for event bridge to target EC2 Auto Scaling?

Answer 9

IAM Role

Question 10

What type of policy is used for event bridge to target Kinesis Stream?

Answer 10

IAM Role

Question 11

IAM Permission Boundaries are supported for ___ and ___

Answer 11

Users and Roles