IAM & AWS CLI Flashcards
What is the proper definition of an IAM role?
An IAM entity that defines a set of permissions for making requests to AWS services, and will be used by an AWS service
What IAM security tool lists all of your AWS Account’s IAM Users and the status of their various credentials?
IAM Credentials Report
What do you call JSON documents that define a set of permissions for making requests to AWS services, and can be used by IAM Users, User Groups, and IAM Roles?
IAM Policies
What principle should you apply regarding IAM Permissions?
Grant least privilege
What should you do to increase your root account security?
Enable Multi-Factor Authentication (MFA)
______________ is the service that you can use to create and provide trusted users with temporary security credentials that can control access to your AWS resources.
AWS Security Token Service (STS)
___________ helps you securely create or connect your workforce identities and manage their access centrally across AWS accounts and applications. It is the recommended approach for workforce authentication and authorization on AWS for organizations of any size and type, but not for generating tokens.
AWS IAM Identity Center
____________ helps you continuously audit your AWS usage to simplify how you assess risk and compliance with regulations and industry standards.
AWS Audit Manager
_____________ primary purpose is to analyze and visualize security data to rapidly get to the root cause of potential security issues.
Amazon Detective
___________ can generate findings based on suspicious activities such as requests coming from known malicious IP addresses, changing of bucket policies/ACLs to expose an S3 bucket publicly, or suspicious API call patterns that attempt to discover misconfigured bucket permissions.
Amazon GuardDuty
___________ is simply a service that can identify the objects, people, text, scenes, and activities on your images or videos, as well as detect any inappropriate content.
Amazon Rekognition
_____________ can track API calls for your account, including calls made by the AWS Management Console, AWS SDKs, command line tools, and other AWS services.
AWS CloudTrail
While AWS IAM Identity Center can integrate with external identity providers, it primarily supports?
SAML 2.0-based identity providers
AWS account ______________ is a single sign-in identity that has complete access to all AWS services and resources in the account.
Root user
To authenticate from the console as a user, you must?
Sign in with your user name and password.
To authenticate from the API or AWS CLI, you must?
Provide your access key and secret key.
Instead of sharing your user root credentials with others, you can create individual ____________ within your account that correspond to users in your organization.
IAM users
By default, a brand new IAM user has?
No permissions to do anything
If the users in your organization already have a way to be authenticated, you can __________ those user identities into AWS.
Federate
What Assume Role Option returns a set of temporary security credentials that you can use to access AWS resources that you might not normally have access to? Typically used within your account or for cross-account access.
AssumeRole
