Identity and Access Management

Question 1

IAM makes it easy to provide multiple users _____ _____ to AWS resources.

Answer 1

Secure access

Question 2

IAM can manage users’ credentials, MFA, and Groups. What are three other Key features that IAM offers?

Answer 2

• Roles
• Access policies
• Password policies

Question 3

What must be explicitly granted to allow a user to access an AWS service?

Answer 3

Permission

Question 4

IAM is a _____ service that is described as eventually _____.

Answer 4

IAM is a Universal service that is described as eventually consistent

Question 5

3 Authentication methods:

• Console _________: use to login to AWS Management Console
• Access ___: Used for programmatic access
• _______ Certificates : Uses SSL/TLS certificates

Answer 5

• Console password: use to login to AWS Management Console
• Access keys: Used for programmatic access
• Server certificates: Uses SSL/TLS certificates

Question 6

An IAM user is an entity that represents a _______ or _______

Answer 6

An IAM user is an entity that represents a person or service

Question 7

IAM users can be created to represent applications, and these are known as _______ ________

Answer 7

IAM users can be created to represent applications, and these are known as Service accounts

Question 8

You can have up to _____ users per AWS account

Answer 8

5000

Question 9

IAM Groups are collections of _____ and have _____ attached to them

Answer 9

IAM Groups are collections of users and have policies attached to them

Question 10

A ____ is not an identity and cannot be identified as a ____ in an IAM policy.

Answer 10

A group is not an identity and cannot be identified as a principal in an IAM policy.

Question 11

Use groups to assign ______ to users.

Answer 11

Permission

Question 12

You cannot ____ groups within groups

Answer 12

nest

Question 13

IAM users or AWS services can assume a role to obtain ________ ________ credentials

Answer 13

IAM users or AWS services can assume a role to obtain temporary security credentials

Question 14

Temporary security credentials are issued by the AWS ________ _____ Service

Answer 14

Temporary security credentials are issued by the AWS Security Token Service (STS)

Question 15

IAM Policies are documents that define permissions that can be applied to _____, _____, or _____

Answer 15

IAM Policies are documents that define permissions that can be applied to users, groups, or roles

Question 16

Policy documents are written in what programming language?

Answer 16

JSON

Question 17

Resources-based policies are attached to a ________ or define permissions for a _________ accessing the resource

Answer 17

Resources-based policies attached to a resource or define permissions for a principal accessing the resource

Question 18

AWS Organizations:

Service Control Policies (SCP) allow you to control the _________ _________ for an __________ or an __

Answer 18

Service Control Policies (SCP) allow you to control the maximum permissions for an organization or an OU

Question 19

Session policies are used with __________ ___ actions

Answer 19

Session policies are used with AssumeRole API actions

Question 20

IAM Best Practices:

Use ____ to assign permissions to IAM users

Answer 20

Use groups to assign permissions to IAM users

Question 21

IAM Best Practices: Get started using permissions with AWS ____ _____

Answer 21

Get started using permissions with AWS managed policies

Question 22

IAM Best Practices: Use customer-managed policies instead of ____ _____

Answer 22

Inline policies

Question 23

IAM Best Practices: Use access levels to review ____ _____

Answer 23

IAM Permissions

Question 24

IAM Best Practices: Use roles for applications that run on Amazon ____ __________

Answer 24

EC2 instances

Question 25

IAM Best Practices: Rotate credentials _________

Answer 25

regularly

Question 26

IAM Best Practices: Use policy conditions for _____ _________

Answer 26

IAM Best Practices: Use policy conditions for extra security

Question 27

Using _______ _______ ________ is the only way to limit root account access

Answer 27

Using Service control policies (SCP) is the only way to limit root account access

Question 28

What feature allows you to log into your PC and use those same credentials to log into AWS?

Answer 28

IAM Federation