IAM - IAM Roles/ Security Tools Flashcards
1
Q
What is an IAM role?
A
It’s a way to assign permissions to AWS services in order for them to perform actions on your behalf. e.g. EC2 Instance Roles
2
Q
What is the difference between an IAM role and policy?
A
An IAM policy is assigned to users and groups. An IAM role is assigned to AWS services.
3
Q
List the two IAM security Tools as well as what they do?
A
IAM Credentials Report: A report listing all users and the status of their various credentials e.g. Access Keys
IAM Access Advisor: On the user level where you can se the service permissions granted to a user and when the services were last accessed. You can use this information to revise policies.
