IAM

Question 1

What is IAM and what does it do or provide?

Answer 1

Centralized control of your AWS account
Shared Access to your AWS account
Granular Permissions
Identity Federation (AD, FaceBook, LinkedIn)
Multi-factor Authentication
Provide temporary access for users/devices and services where needed.
Allows you to set up password rotation policy
Integrates with many different AWS services
Supports PCI DSS Compliance

Question 2

regarding IAM, what is a User?

Answer 2

an End User or person

Question 3

regarding IAM, what is a Group?

Answer 3

a collection of users. Each inherits the permissions of the group.

Question 4

regarding IAM, what is a Policy?

Answer 4

Policies are made up of documents, called Policy documents. These documents are in JSON format and give permissions to what a User/Group/Role is able to do.

Question 5

regarding IAM, what is a Role?

Answer 5

Assigned to AWS resources

Question 6

IAM is a Global service (T/F)?

Answer 6

True

Question 7

The ‘root account’ has ______ privilege

Answer 7

Full Admin

Question 8

What are the two types of access a user account can have?

Answer 8

a) Programatic

b) Users

Question 9

Access Key ID & Secret Access Keys are used for ______ login.

Answer 9

Programmatic