IAM Flashcards
used to delegate administration to other users
Permission Boundaries
Service defines individual users with permissions across AWS resources AWS Multi-Factor Authentication for privileged accounts
IAM
json document within IAM that defines permissions
IAM Policies
applying policies to users or groups
identity policy
applying policies to resources
resource policy
List of Statements that define permissions
policy document
Each statement in an IAM policy matches an
API Request
Allow or Deny in IAM policies
Effect
if an action is not explicitly allowed then the action is
implicitly denied
Overrules all allows
Explicit Deny
Account which has full administrative access to AWS
Root Account
Does IAM allow the use of identity federation and MFA?
Yes
Long term credentials in IAM
AccessKeys
Part of a policy document which refers to an IAM Identity you define
Principle
Type of policy which remains unchanged even if you delete its associated IAM identity, It doesn’t have a strict one-to-one relationship to its associated IAM identity
Standalone Policy