IAM Identity Access & Management Flashcards
IAM
What does IAM stand for in AWS?
Identity and Access Management
Is a web service that helps you securely control access to AWS resources
IAM
What is the purpose of the root account in AWS IAM?
A) It is the account used for day-to-day operations.
B) It is created by default and should not be used or shared.
C) It has limited permissions compared to other accounts.
D) It is used for managing IAM policies only.
B) It is created by default and should not be used or shared.
IAM
What is the least privilege principle in AWS IAM?
A) It states that every user should have maximum permissions.
B) It encourages granting only the permissions required for users’ tasks.
C) It suggests giving permissions without considering security implications.
D) It advises giving full administrative access to all users.
B) It encourages granting only the permissions required for users’ tasks.
IAM
What are IAM Policies in AWS?
A) Documents that define user profiles.
B) Documents that describe the physical infrastructure of AWS.
C) Documents that define the permissions of users or groups.
D) Documents that outline AWS billing details.
C) Documents that define the permissions of users or groups.
IAM
What is the purpose of IAM Roles for Services in AWS?
A) To assign permissions to AWS services.
B) To manage user access to AWS resources.
C) To create user groups in AWS.
D) To define IAM policies.
A) To assign permissions to AWS services.
IAM
What is the purpose of IAM groups in AWS?
A) To define IAM policies.
B) To create IAM users.
C) To organize IAM users and apply permissions collectively.
D) To configure network settings.
C) To organize IAM users and apply permissions collectively.
IAM
Which AWS service provides a report listing all the users in an account and the status of their various credentials?
A) IAM Credentials Report
B) AWS Key Management Service (KMS)
C) IAM Access Advisor
D) AWS Security Hub
A) AWS Identity and Access Management (IAM) Credentials Report
IAM
What is the purpose of IAM Access Advisor in AWS?
A) It provides recommendations for improving security configurations.
B) It shows the service permissions granted to a user and when those services were last accessed.
C) It generates a report listing all users in an account and their credentials.
D) It analyzes network traffic patterns and suggests optimizations.
B) It shows the service permissions granted to a user and when those services were last accessed.