Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

SA PRO > Advanced Permissions & Accounts > Flashcards

Advanced Permissions & Accounts Flashcards

1
Q

What happens when the (sts:AssumeRole*) is used?

A

It generates temporary credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What do access keys contain?

A

Access Key ID and Secret Access Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Access Key ID?

A

Public Part

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Secret Access Key

A

Private Part

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What happens to temporary credentials?

A

They Expire

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Do temporary credentials belong to the identity?

A

No they dont

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How are temp credentials requested?

A

By an identity (AWS or External)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can you invalidate temporary credentials?

A

No, they expire when they expire

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What happens when you change permission policy?

A

It effects everyone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

So how do you revoke permissions?

A

Adding conditional element

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Denying access to anyone who assumed a role before an date and time is called what?

A

Conditional element

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Identifying how many statements make up a policy document is what part of breaking down a statement?

A

Part 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Breaking down the policy is the same regardless of what?

A

How short or long policy is

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A policy statement is either a?

A

A single or list of statments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How can you tell if you have a single statement?

A

It has one or more curly braces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How can you tell if you have a list of statements?

A

It has square brackets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Identifying what a statement does is what part of breaking down a statement?

A

The 2nd part

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Every statement has an effect, what are they and in what order?

A

DENY/Allow/Default Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does Wildcard mean?

A

All objects & paths

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

A statement in effect if certain conditions are met is what?

A

Conditional Block

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Deny Policies are normally accompanied by what? Since by default no effect is auto deny

A

An Allow policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What matches anything not listed inside its component

A

Any NOT operation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What should you look for first on a policy?

A

Not Operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What effects the maximum number of permissions an IAM User or Role has?

A

Permissions Boundary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What effects the maximum number of permissions an IAM User or Role can receive?

A

Permissions Boundary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Any permissions outside the boundaries are what?

A

Not in effect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

IAM permissions Boundaries only impact what?

A

Identity Permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

If IAM Permissions Boundaries only Impact Identity Permissions, What policy applies in Full Effect?

A

Resource Policies

29
Q

What does AWS check for first when Evaluating Policy Logic?

A

Explicit Deny

30
Q

What comes after Explicit Deny in Policy Logic Evaluation?

A

SCPs

31
Q

What comes after SCPs in Policy Logic Evaluation?

A

Resource Policies

32
Q

What comes after Resource Policies in Policy Logic Evaluation?

A

Permission Boundaries

33
Q

What comes after Permission Boundaries in Policy Logic Evaluation?

A

Session Policies

34
Q

What comes after Session Policies in Policy Logic Evaluation?

A

Identity Policies

35
Q

What effect does Policy Evaluation Logic look for when moving through each policy in each step

A

Deny Allow Deny

36
Q

What allows you to share resources between AWS Accounts?

A

AWS Resource Access Manager

37
Q

Do products need to support Resource Access Manager? True or False

A

True

38
Q

Who does AWS Resource Access Manager share with?

A

Principals, Accounts, OUs or Organizations

39
Q

Shared Resources are what to accounts, principals. OUs and Organizations?

A

Visible and Accessed Natively in UI

40
Q

Are you charged for using ( RAM ) ?

A

No, only the service cost

41
Q

AZs Rotate physical locations and may not be same AZ as someone else.
True or False?

A

True

42
Q

Why is hard to coordinate resources between accounts in performance or HA perspective?

A

Because of AZ Rotation

43
Q

What do AZs use which is consistent across account and can be used for different accounts and shared infrastructure deployments?

A

AZ ID

44
Q

What does the 2 parts of example USE-AZ1 broken down tell you?

A

Region and AZ number

45
Q

What does the Owner do in AWS Resource Access Manager?

A

Create share and provide name

46
Q

Does the Owner of Resource Access Manager retain ownership?

A

Yes

47
Q

What principal does the Owner of RAM define to share with?

A

AWS Account or ORG

48
Q

What does enabling sharing in ORG within RAM do?

A

Automatically accept invite

49
Q

What do non org account in RAM have to do manually?

A

Accept Invites

50
Q

What does a created VPC in RAM provide to other accounts?

A

Shared Infrastructure Services

51
Q

VPC Owners create and manage the VPC & Subnets and then what?

A

Share to participants

52
Q

What cant Participants do within a VPC?

A

Provision but cant modify or delete

53
Q

What can’t VPC owners do within RAM if participant adds resources?

A

Modify or delete resources

54
Q

Some Resources in RAM can be shared with any account and some with org accounts only/

True or False?

A

True

55
Q

What defines how much of a thing you can use inside an AWS account?

A

AWS Service Quota

56
Q

Each service has a default region Quota

True or False

A

True

57
Q

Most service quota can’t be increased

True or False?

A

False

58
Q

Some services have a per account quota

True or False?

A

True

59
Q

Some services can’t increase quota because of?

A

Architecture impacts

60
Q

Higher increases in quota means?

A

more process and time needed

61
Q

How do you predefine service quotas that can be used as a template for other accounts?

A

Quota request template

62
Q

How does quota request template help?

A

Reduces admin overhead

63
Q

How do you set an alert that you are approaching your quota limit?

A

Using CloudWatch alarm

64
Q

Can you access service quota using the command line?

A

Yes

65
Q

Who owns an object that is uploaded to a bucket?

A

The account who uploaded

66
Q

What is the legacy method of S3?

Buckets are owned by the PROD account. Objects owned by account that PUTS object in bucket

A

ACL

67
Q

What grants account to external Identities.

Objects owned by account which PUTS; can use account IDS and IAM Users with resource policy

A

Bucket Policy

68
Q

Who owns the bucket and object when you assume Role with IAM and operate as an identity in that account?

A

The account owner

SA PRO (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions