Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Practitioner > IAM > Flashcards

IAM Flashcards

1
Q

Main components of IAM Service

A

User

Group

IAM Role

MFA

IAM Policy

API keys (Programmatic access)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

User account

A

Assigned to a service or

Individual

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How to configure what a users is allowed to do within AWS?

A

Creating an IAM Policy and attach it to a USer.

It could be done directly or through a group

Another way is with a role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is an IAM User?

A

An entity which represents:

* a person

* a service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What can be assigned to an IAM user?

A

An access key

A password for access to the management console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is an access key?

A

Is an ID and a secret access key for programmatic access to the AWS API, CLI, SDK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Best practices for the root accounts:

A

Don’t use the root users credentials

Don’t share the root users credentials

Create an IAM user and assign administrative permissions as required

Enable Multi-Factor Authentication for it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How many users can you have per AWS account?

A

5000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is ARN?

A

Amazon Resource Name which uniquely identifies the user across AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are IAM Groups?

A

Collections of users and have policies attached to them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the groups for?

A

Assign permissions to users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Who does assume the roles?

A

Another entity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are IAM Policies?

A

Documents that define permissions and can be applied to users, groups and roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When you have several policies which one is applied?

A

The mos restrictive policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the policy simulator?

A

A toolto help you understand, test, and validate the effects of access control policies

17
Q

What is an MFA?

A

Something you know (pwd)

Something you have (token)

Something you are

18
Q

Who is MFA in AWS?

A

A password

Virtual MFA or Phisical MFA

19
Q

What is Security Token Service (STS)?

A

Is a web service that enables you to request temporary, limited-privilege credentials for IAM users or for users that you authenticate (federated users)

20
Q

IAM Best Practices

A

Lock away the AWS root users access keys

Create individual IAM users

Uses AWS defined policies to assign permissions whenever possible

use groups to assign permissions to IAM users

Grant least privilege

Uses access levels to review IAM permissions

Configure a strong password policy for users

Use roles for applicatiosn that run on AWS EC2 instances

Delegate by using roles instead of sharing credentials

Rotate credentials regularly

Remove unnecessary credentials

use policy conditions for extra security

Monitor activity in your AWS account

21
Q

IAM Bestpractices (2)

A
22
Q
A

AWS Practitioner (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions