IAM

Question 1

When should you use root account?

Answer 1

NEVER. Only use root account for initial setup.

Question 2

Can I use web identities with IAM roles to scale platform?

Answer 2

Yes, can connect with web identity app federation using Open ID.

Question 3

Three types of IAM policy statements

Answer 3

1. Explicit Deny: overrules everything else
2. Explicit Allow: takes effect, unless there is also an explicit deny
3. Implicit Deny: accounts have no access by default.

Question 4

Maximum number of IAM Users

Answer 4

5,000

Question 5

IAM Groups Limitations

Answer 5

1. No single group for ALL users, this needs to be created manually
2. No nesting of further groups
3. 300 groups per account
4. Groups cannot be logged into
5. Not a true identity, cant reference it directly
6. Limit of 10 groups per user

Question 6

Secure Token Service

Answer 6

Anytime you see cross account access, or assuming role, think STS. Gives temporary privileges to perform actions.