CH2: IAM Flashcards
Manage users and their level of access to the AWS Console
Identity Access Management
IAM
IAM
Centralized control of your
AWS account
IAM
Shared access to your
AWS account
IAM
Gives you Granular
Permissions
IAM
Identity Federation
Active Directory
IAM
Provides temp access as necessary for
Users
Devices
Services
IAM
Sets a juggler for your passwords
Rotation Policy
IAM
Integrates with many different
AWS Services
IAM
Supports PCI DSS Compliance
For billing purposes
IAM
End users are
Users
IAM
A collection of users under one set of permissions
Group
IAM
These can be created and then assigned to AWS resources
Roles
IAM
A document that defines one (or more) permissions.
Policy
Policy Simulator - exam tip
Test IAM Permissions BEFORE you commit them to
Prod
Policy Simulator - exam tip
Validate that the policy works
As expected
Policy Simulator - exam tip
Great for troubleshooting because you can test
Policies attached to existing users and you suspect the problem is related to AWS IAM.
IAM
accessed
Universally not by region at this time,
IAM
The account created when you first set up your account,
Root Account
IAM
What type of access does the ROOT account have
Complete ADMIN access
IAM
When new users are first created they are assigned
Access Key ID
–AND–
Secret Access Keys
IAM
Access Key ID and Secret Access key are NOT the same as Login to AWS management console
You can not use them to log in to the console
IAM
You can use these to access AWS via APIs, Command lines and SDK
Access Key ID
–AND–
Secret Access Keys
IAM
You only get to view these once so if you lose them you have to regenerate new ones - so keep them in secret, keep them safe Gandalf with Frodo….
Access Key ID
–AND–
Secret Access Keys
IAM
Always set this up on your root account
Multifactor Authentication (MFA)
IAM
You can create and customize your own
Password rotation policies,
IAM
Delegates AWS resources access for users, groups or services
IAM ROLE
IAM
A JSON document that defines one or more permissions
IAM Policy
IAM
What is the best way to enable your EC2 instance to read files in an S3 bucket?
Create an IAM Role with read-access to S3 and assign the role to the EC2 instance,
IAM
Allow apps to securely make API requests from instances, without requiring you to manage security credentials that the apps use,
IAM Roles
IAM
Allows you to manage users, groups and roles and their corresponding level of access to AWS
IAM
