General Knowledge defined on AWS(6-10) Flashcards
What is AWS shared responsibility model?
The customer is responsible for security in the cloud. AWS is responsible for the security of the cloud.
What is AWS Identity and Access Management (IAM)?
AWS Identity and Access Management (IAM)(opens in a new tab) enables you to manage access to AWS services and resources securely.
What are some features of AWS Identity and Access Management (IAM)?
Create IAM users , groups ( can assign to users once policies are applied ), and roles ( temporary permissions that can be taken on by external or internal entities)
Create IAM policies(written in JSON they define privileges for API calls and can be attached to users, groups, and roles)
Enable Multi-factor authentication.
What are some good practices for IAM in AWS?
Security principle of least privilege when granting permission, Create individual IAM users for each person who needs to access AWS and IAM roles are ideal for situations in which access to services or resources needs to be granted temporarily, instead of long-term.
What is AWS Organizations used for?
You can use AWS Organizations(opens in a new tab) to consolidate and manage multiple AWS accounts within a central location.
How do you control permissions through AWS Organizations?
In AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies (SCPs)(opens in a new tab). SCPs enable you to place restrictions on the AWS services, resources, and individual API actions that users and roles in each account can access.(SCPs cannot be applied to individual Users, Groups and Policies)
What is an Organizational unit in AWS Organizations?
In AWS Organizations, you can group accounts into organizational units (OUs) to make it easier to manage accounts with similar business or security requirements. When you apply a policy to an OU, all the accounts in the OU automatically inherit the permissions specified in the policy.
What is AWS Artifact?
AWS Artifact(opens in a new tab) is a service that provides on-demand access to AWS security and compliance reports and select online agreements.
What are some places to go in AWS to ensure compliance?
The Customer Compliance Center and AWS Artifact
Which tasks can you complete in AWS Artifact?
Access AWS compliance reports on-demand and
Review, accept, and manage agreements with AWS.
What is a Denial-of-service attack?
A denial-of-service (DoS) attack is a deliberate attempt to make a website or application unavailable to users.
What is AWS Shield?
AWS Shield is a service that protects applications against DDoS attacks. AWS Shield provides two levels of protection: Standard and Advanced.
What is AWS Key Management Service (AWS KMS)?
AWS Key Management Service (AWS KMS)(opens in a new tab) enables you to perform encryption operations through the use of cryptographic keys. A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data. You can use AWS KMS to create, manage, and use cryptographic keys. You can also control the use of keys across a wide range of services and in your applications.
What is AWS WAF?
AWS WAF(opens in a new tab) is a web application firewall that lets you monitor network requests that come into your web applications. AWS WAF works together with Amazon CloudFront and an Application Load Balancer. Recall the network access control lists that you learned about in an earlier module. AWS WAF works in a similar way to block or allow traffic. However, it does this by using a web access control list (ACL)(opens in a new tab) to protect your AWS resources.
What does Amazon Inspector do?
Amazon Inspector helps to improve the security and compliance of applications by running automated security assessments. It checks applications for security vulnerabilities and deviations from security best practices, such as open access to Amazon EC2 instances and installations of vulnerable software versions.
