IAM Best Practices

Question 1

1

Answer 1

Don’t use the root account except for AWS account setup

Question 2

2

Answer 2

One physical user = One AWS user

Question 3

3

Answer 3

Assign users to groups and assign permissions to groups

Question 4

4

Answer 4

Create a strong password policy

Question 5

5

Answer 5

Use and enforce the use of MFA

Question 6

6

Answer 6

Create and use Roles for giving permissions to AWS services

Question 7

7

Answer 7

Use Access Keys for Programmatic Access (CLI / SDK)

Question 8

8

Answer 8

Audit permissions of your account using IAM Credentials Report & IAM Access Advisor

Question 9

9

Answer 9

Never share IAM users & Access Keys