IAM

Question 1

What does IAM allow you to do?

Answer 1

Manage users and their level of access to the AWS console

Question 2

How do you secure your root account?

Answer 2

1. Enable multi-factor auth
2. Create separate admin groups with appropriate permissions

Question 3

What do we use to control permissions in IAM?

Answer 3

By creating policy documents (written in JSON) and assigning them to groups/users/roles

Question 4

T/F: IAM functions at a regional-level

Answer 4

False, users/groups/roles are created in all regions

Question 5

Describe users, groups, and roles

Answer 5

Users: physical people
Groups: functions, such as developer, admin, etc. containing users
Roles: internal usage within AWS

Question 6

T/F: it’s always best practice for users to inherit permissions from groups

Answer 6

True, because it’s much easier to manage group permissions than individual user permissions

Question 7

What’s the principle of least privilege?

Answer 7

Only assign a user the minimum amount of privileges they need to do their job

Question 8

T/F: a user by default has no permissions when created

Answer 8

True