IAM and CLI Flashcards
Users
Mapped to a physical user, has a password for AWS console
Groups
Contain users only
JSON
document that outlines permissions for users or groups
Roles
IAM entity that defines a set of permissions for making requests to AWS services and will be used by an AWS service
Security
MFA+ Password Policy
AWS CLI
manage your AWS services using the command line
AWS SDK
manage your AWS services using a programming language
Access Keys
access AWS using the CLI or SDK
Audit
IAM Credentials Reports and IAM Access Adviser
IAM Best Practice
Don’t use the root user account, grant least privilige
Policies
JSON documents that define a set of permissions for making request to AWS services, and can be used by IAM users, groups and roles
What statements do IAM policy consist of?
Sid, Effect, Principal, Action, Resource and Condition
IAM Credentials Report
IAM Security tool that lists all your AWS Account’s IAM Users and the status of their various credentials.