IAM Flashcards
1
Q
What is a policy?
A
A JSON object to define the access of users/groups/roles to resources
2
Q
How to setup billing alarm?
A
Setup a cloudwatch alarm with the Total Estimated Charges is greater than $X threshold. Use SNS to send an email in case the alarm is triggered.
3
Q
Explain the structure of AMI policy
A
arn:aws:region:account_id:resource_type/instance
4
Q
Explain the IAM policy privilege precedence
A
It is a json document that defines permissions via a list of statements
Everything is deny by default
Explicit deny > everything else
5
Q
What is the purpose of permission boundary?
A
It sets the maximum permission the delegates identify will have. This is useful for delegating developers the ability to create roles for their lambda functions
