IAM

Question 1

IAM provide

Answer 1

centralized control, shared access to aws account, granular permissions, Federation, MFA, temp access to users devices and services , setup password rotation policy, PCI DSS

Question 2

Policy

Answer 2

Controls what a user/group/role is able to do

Question 3

IAM users signin link

Answer 3

.siginin.aws.amazon.com/console

Question 4

Virtual MFA

Answer 4

google authentication app

Question 5

Access types

Answer 5

Programmatic(access key id, access key), Management console(password)

Question 6

Secret access key for programmatic access

Answer 6

is visible only one time. It cannot be used to login to console.

Question 7

New users

Answer 7

Have no permission when they are first created

Question 8

What command should you run on a running instance if you want to view its user data (that is used at launch)?

Answer 8

curl http://169.254.169.254/latest/user-data