AWS Broad

Question 1

IAM entities

Answer 1

Users assigned to groups which have have 1-10 policies attached.
Policies are a written set of privileges to objects included in the policy e.g. “allow” “s3:”. “”
Roles to let entities act as you/root, under a policy.

Question 2

Access Key ID & Secret Access Key

Answer 2

Basically id & issues for programmatic login of your user. Think of it as Access Key ID+SECRET (just like user+ password).

Question 3

2. US regions

Answer 3

• US East (North Virginia) - 6 (us-east-1abcdef)
• US East (Ohio) - 3 (us-east-2abc)
• US West (Oregon) - 3 (us-west-2abc)
• US West (North California) - 3 (us-west-1abc)
• GovCloud (US-West) - 2
• Canada (Central) - 2 (ca-central-1ab)
• and a secret one for intelligence etc.

Question 4

2. Non-US regions

Answer 4

• South America (Sao Paulo) - 3 (sa-east-1abc)
• Europe (Ireland) - 3 (eu-west1abc)
• Europe (Frankfurt) - 3 (eu-central-1abc)
• Europe (London) - 2 (eu-west-2ab)
• Asia Pacific (Singapore) - 2 (ap-southeast-1ab)
• Asia Pacific (Seoul) - 2 (ap-northeast-2ab)
• Asia Pacific (Tokyo) - 3 (ap-northeast-1abc)
• Asia Pacific (Mumbai) - 2 (ap-south-1ab)
• Asia Pacific (Sydney) - 3 (ap-southeast-2abc)
• China (Beijing) - 2 (cn-north-1ab)

Question 5

3.1 IAM entities

Answer 5

Users End users (people).
Groups Collection of users under a set of permissions (* up to 10 polciies).
Roles Assigned to AWS resources. * allows other things to perform actions as you.
Policies Document that defines one or more permissions (to users, groups, roles).

Question 6

3.1 company links

Answer 6

Account link https://614658137307.signin.aws.amazon.com/console
Customized Link https://mycompany.signin.aws.amazon.com/console

Question 7

3.1 IAM users

Answer 7

IAM user Access Key ID, Secret Access Key, username, password
Access Programmatic and/or Console

Question 8

3.1 IAM summary

Answer 8

• Users assigned to Groups.
• Groups have 1-10 Policies attached.
• Policies are a written set of objects and permissions in JSON key:value format.
• Roles can grant a Policy to a user/svc (e.g. EC2 has FullR/W to S3).
• IAM is global (no region).
• Root account is 1st and complete admin.
• Users have no perms at start.
• Users have Access key IDs & secret Access Keys.
• Access Keys for progrmmatic axs, not COnsole axs.
• Access Keys & passwords can only be seen once, so save it.
• Always want MFA on Root account.
• Create/customise Password Policy for whole account.