Chp 4: IAM and AWS CLI

Question 1

What are the factors that a person should consider when deciding WHERE to launch an application

Answer 1

1. compliance
2. proximity
3. available resources
4. pricing

Question 2

Are most services global or region based?

Answer 2

Region based

Question 3

What is the IAM policy structure

Answer 3

• version
• statement
• effect
• resource
• principal (account/user/role)

Question 4

What are the common MFA types

Answer 4

• Virtual MFA
• Universal 2nd Factor Key
• Hardware Key Fob
• Gov Hardware Key fob

Question 5

How can AWS be accesed

Answer 5

• SDK
• CLI
• mgmt console

Question 6

T/F: AWS services can be assigned permissions

Answer 6

some aws services will need to perform actions on your behalf

Question 7

What are the common roles that can be assigned to aws services

Answer 7

• lambda functions
• EC2 instance roles
• Roles for CloudFormation (How to set up resources)

Question 8

What is the level of reporting for IAM credentials and access advisor

Answer 8

• IAM Credentials –> account level

- IAM Access Advisor Report –> user level