IAM Flashcards
IAM consists of:
Users, Groups, Roles, Policy Documents
Groups
A way to group our users and apply policies to them collectively
Policy documents are written in
JSON, represented by a key-value pair
Are credentials region centric in IAM, when created?
No, it is universal
When is the Root account created and what access does it have?
account created when first setup your AWS account. It has complete Admin access
When users are first created, they have
NO permissions
What are new users assigned when first created?
Access Key ID, Secret Access Key
Are the Access Key ID/Secret Access Key like a password?
No, you cannot use the Access Key ID/Secret Access Key to login to the AWS Console. You can use this to access AWS via the APIs and Command Line however.
How many times can you view the Access Key ID/Secret Access Key when created?
Once. If you lose them, you have to regenerate them, so save them in a secure location.
Should you set up MFA on your root account?
ALWAYS!
Can you create and customize your own password rotation policies?
Yes
