Accounts Flashcards
What is a container for identities and resources?
AWS Account
Two things you need to create an AWS account
Unique email address
Credit card
(this is a little different if you create an account as part of an org)
Has full control over an AWS account and cannot be restricted
root user
Default access for new users, groups, roles
No access
MFA - Knowledge
Something you know, usernames/passwords
MFA - Possesson
MFA token, phone
MFA - Inherent
Something you are - fingerprint, iris
MFA - Location
Location (Physical), network you are on
What is in the QR Code that you scan in an MFA app?
Secret Key
Other Metadata
4 different typs of budgets you create
cost
usage
savings plan
reservations
Two parts of long-term credentials for programmatic access for IAM user
Access Key ID
Secret Access Key
Two names used for the root account of an AWS Organization
Management Account
Master Account
Can an AWS Management account of an Org be in an OU?
Yes
The name of the result of billing actions once AWS accounts join an AWS organization
Consolidated Billing
Name a cost expediture advantage of using AWS Organizations
Consolidation of reservations and volume discounts (for services that are cheaper the more you use)
What will you need to do to verify a newly created AWS Organization from a standalone account?
Click a link in an email sent to the org email
To invite an aws account into your org, what 1 of 2 things do you need to have?
Account number
or
root user email address
What might you have to request if you get an error inviting/creating a new AWS account in an AWS Org?
Using Service Quotas, you may have to request an increase to maximum amount of accounts in your org.
What follow-up action item does an administrator need to do for accounts invited to an AWS org?
Create a IAM role for accessing the member account from the managemetn account
What automatically gets created when you use AWS organizations to create a new account?
IAM Role for managment of the member account from the management account
Can you switch roles if logged in as the root account?
No, you have to be logged in as an IAM identity
Four things needed when switching to a role
Account
Role
DisplayName
Color
Does switch role persist across browsers?
No
