Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS > AWS Short Memorizations > Flashcards

AWS Short Memorizations Flashcards

1
Q

A person or application that can make a request for an action or operation on an AWS resource.

A

A principal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

List the 4 types of principals in AWS (Hint: FUURA)

A

Federated Users,
Users,
Roles,
Applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The type of principal that can be logged into with a Google, Facebook, or Amazon Account

A

A federated user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

An AWS Service that helps you securely control access to AWS resources.

A

AWS IAM
(Identity and Access Management)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

List the 5 types of policies

A

Identity based
Resource based
IAM permission boundaries
Service control policies (SCP)
Session policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What permissions do users have by default

A

none

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Max number of users that can be created, per account.

A

5000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Max number of policies that can be attached to an IAM user or IAM role

A

20

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Max number of groups an IAM user can be a member of

A

10

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Max number of Access keys that can be assigned to an IAM user

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

An IAM identity that has specific permissions.

A

IAM Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A JSON document that defines permissions.

A

Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What type of policy is applied to users, groups and roles

A

Identity based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A Bucket Policy is an example of what type of policy.

A

Resource based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Should you switch regions when creating or managing IAM users that are in another region?

A

No
(IAM is global and won’t even give a region selection)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

3 options for MFA

A

Virtual MFA device
U2F security key
Other hardware MFA device

17
Q

This is an example of what?
-> arn:aws:iam::121212121212:mfa/gwilki2

A

An ARN (Amazon Resource Name)

18
Q

An AWS service that provides temporary credentials.

A

STS (Security Token Service)

19
Q

A policy that controls who can assume an IAM Role

A

A Trust Policy

20
Q

An Identity based policy that can be attached to multiple users, groups, or roles.

A

Managed Policy

21
Q

An Identity based policy that is applied directly to only a single user, group, or role. (has a 1 to 1 relationship)

A

Inline Policy

22
Q

A Bucket Policy is what type of policy

A

Resource based

23
Q

A Trust Policy is what type of policy

A

Resource based

24
Q

A Permissions Policy is what type of policy

A

Identity based

25
Q

A policy that limits what permissions a user can have as well as any users created by them.

A

A permissions boundry

26
Q

Type of policy that is attached to a resource and defines permissions for principals to access it.

A

Resource based

27
Q

Type of policy that sets the max permission for an OU

A

AWS Organizations SCP (Service Control Policy)

28
Q

Type of policy used with AssumeRole* API Actions

A

Session policy

29
Q

What are the effective permission for a principle when combining Identity based policy with Resource based policy (just the overlapping OR all combined)?

A

All

30
Q

What are the effective permission for a principle when combining Identity based policy with a Permissions boundary (just the overlapping OR all combined)?

A

Overlapping

31
Q

What are the effective permission for a principle when combining Identity based policy with an SCP (just the overlapping OR all combined)?

A

Overlapping

32
Q

List the 4 key names for an object within an IAM Policy’s JSON Statement block

A

Effect
Action
Resource
Condition

33
Q

Whats the key name to define “allow” or “deny” in a policy statement

A

Effect

34
Q

What is the key name to define an API action that you are allowing or denying in a policy statement

A

Action

35
Q

What is the key name to define the ARN in a policy statement

A

Resource

36
Q

What is the key name to optionally define when a policy statement is in affect

A

Condition

AWS (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions