Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

aws solutions architect > iam & cli > Flashcards

iam & cli Flashcards

1
Q

What does IAM stand for?

A

Identity and Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

is IAM a global or region service?

A

global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what is the root account?

A

created by default, shouldn’t be used or shared

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what are users in IAM?

A

are people within your organization, and can be grouped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what do groups in IAM contain?

A

only contain users, not other groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

T/F: Users must belong to groups

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

T/F: Users can belong to multiple groups

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

For IAM Permissions, what are the policies?

A

JSON documents that define permissions for users or groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Who can be assigned the policies?

A

users or groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what are inline policies?

A

policies assigned to a single user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is the least privilege principle?

A

don’t give more permissions than a user/group

needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What do IAM policy structure consist of ?

A

Version, Id, Statement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the Version in IAM policy structure?

A

policy language version, always include “2012-10-17”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the Id in IAM policy structure?

A

an identifier for the policy (optional)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the Statement in IAM policy structure?

A

one or more individual statements (required)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What do IAM policy structure Statements consist of ?

A

Sid, Effect, Principal, Action, Resource, Condition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

what is the Sid for statements?

A

an identifier for the statement (optional)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the Effect in the statement?

A

whether the statement allows or denies access

Allow, Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the Principal in the statement?

A

account/user/role to which this policy applied to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the Action in the statement?

A

list of actions this policy allows or denies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the Resource in the statement?

A

list of resources to which the actions applied to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the Condition in the statement?

A

conditions for when this policy is in effect

optional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

strong passwords result in

A

higher security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what can you set up in password policy?

A 
Set a minimum password length
• Require specific character types:
• including uppercase letters
• lowercase letters
• numbers
• non-alphanumeric characters
• Allow all IAM users to change their own passwords
• Require users to change their password after some time (password expiration)
• Prevent password re-use
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is MFA in aws iam?

A

password you know and device you know

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

what do you want to protect with MFA?

A

root account and iam users

27
Q

what is the main benefit of mfa?

A

if a password is stolen or hacked, the account is not compromised

28
Q

what are the 3 ways to access AWS

A

AWS Management console
AWS CLI
AWS SDK

29
Q

what do you need to log in to aws with cli and sdk?

A

access keys

30
Q

access key id is like the

A

username

31
Q

secret access key is like the

A

password

32
Q

what is the aws cli?

A

open-source tool that enables you interact with aws services using commands in your own cli shell

33
Q

aws cli provides direct access to what?

A

public apis of aws servies

34
Q

what can you develop with aws cli to manage your resources?

A

scripts

35
Q

what does aws sdk stand for?

A

AWS Softwre Development Kit

36
Q

what is aws sdk?

A

language-spec apis that enables you to access and manage AWS services programatically that can be embeded within your app

37
Q

what languages do aws sdk support

A

JS, py, PHP, .net, ruby, java, go, nodeJS,c++, mobile sdks, ioT device

38
Q

what are IAM Roles?

A

aws services you need to perform actions on your behalf to other aws services using permissions

39
Q

what are common IAM roles?

A

EC2 instance roles, lambda function roles, and role for cloudformation

40
Q

What is IAM credentials report?

A

report that lists all your account’s users and the status of their various credentials

41
Q

What is IAM Access Advisor ?

A

Access advisor shows the service permissions granted to a user and when those services were last accessed

42
Q

What level is IAM credentials report?

A

acct level

43
Q

what level is iam access advisor?

A

user-level

44
Q

what can you use iam access advisor information for/

A

revise your policies

45
Q

T/F: Dont use the root acct except for AWS acct set up

A

T

46
Q

One phyiscal user =

A

1 aws user

47
Q

What is the best practice for assigning users ?

A

assign users to groups

48
Q

What is the best practice for assigning permissions?

A

assign permissions to groups

49
Q

T/F: create strong password policy

A

T

50
Q

T/F: Use and enforce use of MFA

A

T

51
Q

What do you create and use roles for?

A

giving permissions to AWS services

52
Q

what do you use Access Keys for?

A

Programmatic Access (CLI/SDK)

53
Q

how do you audit permissions of acct ?

A

IAM Credentials Report

54
Q

What should never be shared?

A

IAM Users & Access Keys

55
Q

what is the Shared Responsibiltiy Model for IAM?

A

what AWS handles and what the AWS acct owner handles for respons

56
Q

In the Shared Responsibiltiy Model for IAM, what does AWS handle?

A

Infrastructure (global networkk security), Configuration and vulnerability analysis, and compliance validation

57
Q

In the Shared Responsibiltiy Model for IAM, what does account owner handle?

A

Users, Groups, Roles, Policies management and monitoring; enable mfa for all accts; rotate keys often; use IAM tools to apply appropriate permissions; analyze access patterns and review permissions

58
Q

Users are maped to

A

a phyiscal user and has a password for AWS console

59
Q

Groups contain only

A

users

60
Q

Policies are JSON docs that outlines

A

permissions for users or groups

61
Q

Roles

A

for ec2 instances or aws services

62
Q

security

A

mfa + strong password policy

63
Q

access keys

A

access aws using cli or sdk

64
Q

audit

A

iam cred report or iam access advisor

aws solutions architect (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions