IAM & AWS CLI Flashcards
3 options to access AWS
- CLI (Command Line Interface)
- SDK (Software Dev Kit)
- Management Console
How do you create access keys?
AWS Console
Are Access Keys managed by AWS or the User?
User
What is the AWS CLI?
Its the command line interface which allows you to interact with AWS cervices using commands.
What is the AWS CLI?
Its the command line interface which allows you to interact with AWS cervices using commands.
Does the CLI have direct access to public APIs of AWS services?
Yes
Can you develop scripts to manage your resources using the AWS CLI?
Yes
What is AWS SDK?
Software Development Kit
What is SDK made of?
Language-specific APIs (set of libraries)
What does SDK lets you do?
Enables you to access and manage AWS services programmatically
Is SDK embedded within your application?
Yes
SDK Example?
CLI is built on AWS SDK for Python
What is CloudShell?
It is a terminal in cloud of AWS - Works by Region
What do AWS services need to perform actions on your behalf?
IAM Roles for Services
What are IAM roles used by?
AWS Services
Example
You have an EC2 instance that needs access to an AWS service. To do that, you assign an IAM role to the EC2 instance.
What are some Common Roles for IAM?
- EC2 instance Roles
- Lambda Function Roles
- Roles for CloudFormation
How many Security Tools does IAM have?
Two
What are the IAM Security Tools called?
- IAM Credentials Report (account - level)
- IAM Access Advisor (user - level)
What does the AIM Credentials Report IAM tool do?
Generates a report that lists all account users and status of their credentials
What does the Access Advisor IAM tool do?
Shows the service permissions granted to a user and when those services were last accessed.
Which IAM tool can you use to revise your policies?
Access Advisor IAM tool
What IAM tool do you use to see when a service was last accessed by a specific user?
Access Advisor IAM tool
When using Access Advisor, what can you do if you see that some services were never accessed by a user?
Remove their permission to that service
True/False - Use Root account only for AWS account Setup
True
Is one physical user = One AWS user?
Yes
Can you assign users to groups and permissions to groups?
user -> group then permission -> group
Yes
What should u use when giving permissions to AWS services?
Roles
If you want to use CLI or SDK (programmatic access, what should you create and use?
Access Keys
If you want to use CLI or SDK (programmatic access, what should you create and use?
Access Keys
How can you audit permissions to your account?
IAM Credentials Report & IAM Access Advisor
What should Groups contain?
Users
What are policies made out of?
jSON files that outline permissions for users or groups
To assign permissions within AWS to EC2 instances or AWS services you need what?
To assign Roles
How can you enforce security to users?
- MFA
- Password Policy
What are Access Keys used for?
To access AWS using CLI or SDK
