AWS - Certified Solutions Architect Associate

Question 1

IAM stands for?

IAM & AWS CLI

Answer 1

Identity and Access Management

Question 2

Is IAM a Global service?

IAM & AWS CLI

Answer 2

Yes, it is

Question 3

What the ‘Root’ account is used for?

IAM & AWS CLI

Answer 3

Only for setting up an AWS account for the first time. It is not meant to be shared or used afterwards.

Question 4

Is the ‘Root’ account created by default?

IAM & AWS CLI

Answer 4

Yes, it is

Question 5

What is a ‘User’?

IAM & AWS CLI

Answer 5

People within your organization

Question 6

What is a ‘Group’?

IAM & AWS CLI

Answer 6

It is a collection of users who share permissions over resources

Question 7

Can ‘Groups’ contain other groups?

IAM & AWS CLI

Answer 7

No, they cannot

Question 8

Can users belong to multiple groups?

IAM & AWS CLI

Answer 8

Yes, they can. Although, it is not necessary for users to belong to a group

Question 9

What are ‘Policies’?

IAM & AWS CLI

Answer 9

JSON documents assigned to groups, and they define the set of permissions over resources

Question 10

What is the ‘Least Privilege Principle’?

IAM & AWS CLI

Answer 10

Do not give more permissions than a user needs

This is a best practice applied on AWS

Question 11

What are AWS’ credential types?

IAM & AWS CLI

Answer 11

• Access key - Programatic access
• Password -AWS Management Console access

Question 12

What the ‘Account alias’ is used for?

IAM & AWS CLI

Answer 12

Customize your AWS account’s sign-in URL

Question 13

What is an ‘In-line’ policy?

IAM & AWS CLI

Answer 13

It is a policy only attached to a single user

Question 14

What is ‘Policy inheritance’ on IAM?

IAM & AWS CLI

Answer 14

When users in a group acquire the set of permissions defined on the group(s) they belong to

Question 15

An IAM Policy consists of

Answer 15

• Version - “2012-10-17”
• Id - optional identifier
• Statement - one or more individual statements

Question 16

What are the elements of an statement in an IAM Policy

IAM & AWS CLI

Answer 16

• Sid - Statement Id (optional)
• Resource - List of resources the policy applies to
• Effect - Allow or Deny
• Action - List of actions the policy allows or deny
• Principal - List of entities (user/group/role/account) the policy applies to
• Condition - conditions for when the policy is in effect (optional)