IAM Flashcards
Is IAM Universal?
Yes, IAM does not apply by region
What are the 4 Steps to Securing the Root Acct?
- MFA on the account
- Create an Admin Group for Admins
- Create User Accounts for Admins
- Add users to admin group
What permissions do new users have by default?
None, until permissions are assigned new users have not permissions
Are access key ids and secret keys the same as a UN & PW
No, they are only used for dev stuff
How many chances do you have to see a private key?
Once!
Should you use password rotation?
Yes, always enable this!
What is IAM Federation?
Combination of existing user w/ AWS. EG ad or sso
What standard does Identity Federation use?
SAML the same as ad
Root Account
Has complete admin access, secure it ASAP and use it as infrequently as possible
When to use Access Key IDs and Secret Keys?
Typically used in the dev world to access resources like EC2
Keep in mind you can only view a secret key once and then never again