AWS Security

Question 1

What is the AWS shared responsibility model?

Answer 1

AWS is responsible for infrastructure and Foundation services. (hypervisor down)
Customer is responsible for application, Networking, OS and content. (hypervisor up)

Question 2

IAM Role ?

Answer 2

This is a global setting that controls who can access your amazon API.

1) Example: Who can snapshot a disk
2) Example: Create an S3.
3) Example: Create an EC2 instance.

Question 3

Describe IAM Roles ?

Answer 3

All IAM Roles use a policy
IAM role has no associated credentials
IAM users, applications and services may assume IAM roles.
IAM is similiar to sudo

Question 4

AWS IAM Best practices?

Answer 4

1) delete the aws (root) account
create IAM users
use groups to assign responsibility
use roles whenever possible.