IAM & AWS CLI Flashcards
What is IAM and is it a regional or global service?
IAM (Identity and Access Management) is a global service.
What is the root account, and should it be used?
It’s the account created by default with full access; should not be used regularly or shared.
Can an IAM user be in multiple groups? Can groups contain other groups?
A user can be in multiple groups. Groups cannot contain other groups.
What format are IAM policies written in?
JSON (JavaScript Object Notation)
What are the key components of an IAM policy?
Version, Id, Statement (Sid, Effect, Principal, Action, Resource, Condition)
What principle should always be followed when assigning permissions?
Least privilege – only give the permissions needed.
What does the ‘Effect’ field in a policy do?
Specifies whether access is allowed or denied.
What does MFA stand for and why is it important?
Multi-Factor Authentication – it adds an extra layer of security.
Name 3 types of MFA devices supported by AWS.
- Virtual MFA app
- U2F Security Key
- Hardware MFA device
What are best practices for passwords in IAM?
- Set length
- Include character types
- Expire passwords
- Prevent reuse
What are three ways users can access AWS?
- Management Console
- AWS CLI
- AWS SDK
What are access keys composed of?
Access Key ID (username) and Secret Access Key (password)
What is the AWS CLI?
A tool to interact with AWS services via terminal/command-line.
What is the AWS SDK used for?
Programmatic access to AWS services through code.
What are IAM roles used for?
Grant temporary permissions to AWS services.
Name three common IAM roles for AWS services.
- EC2 instance roles
- Lambda roles
- CloudFormation roles
What is the IAM Credentials Report?
Account-level report showing user credentials and status.
What does IAM Access Advisor show?
Services a user has access to and when they were last accessed.
What should you do instead of using the root account regularly?
Create IAM users with least privilege and enable MFA.
Should IAM users share access keys?
Never share IAM users or access keys.
How often should access keys be rotated?
Regularly, as part of best practices.
Under the shared responsibility model, what is AWS responsible for?
Infrastructure, hardware, network, global security.
What are you (the customer) responsible for in IAM?
Managing users, roles, policies, enabling MFA, auditing.
