Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS > Identity and Access Management > Flashcards

Identity and Access Management Flashcards

1
Q

Q: What is AWS IAM?

A

A: Identity and Access Management (IAM) is a service for securely managing access to AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Q: What are the key features of AWS IAM?

A

A: Centralized control, granular permissions, secure access to AWS resources, and support for multi-factor authentication (MFA).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Q: What are the main components of IAM?

A

A: Users, Groups, Roles, and Policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Q: What is an IAM user?

A

A: An entity that represents an individual person or application that interacts with AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Q: What is an IAM group?

A

A: A collection of IAM users with shared permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Q: What is an IAM role?

A

A: An entity that AWS services or applications can assume to gain temporary access to resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Q: What are IAM policies?

A

A: JSON documents that define permissions for users, groups, or roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Q: What are managed policies?

A

A: Predefined policies managed by AWS or customers that can be attached to IAM identities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Q: What are inline policies?

A

A: Policies directly embedded in a single user, group, or role.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Q: What is Multi-Factor Authentication (MFA) in AWS IAM?

A

A: An additional layer of security requiring a second factor, like a hardware token or app.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Q: What is the AWS root user?

A

A: The account created when signing up for AWS, with full permissions across all resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Q: What are IAM access keys?

A

A: Key pairs used to authenticate programmatic requests to AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Q: What are best practices for using AWS IAM?

A

A: Enable MFA, use least privilege, rotate credentials, avoid using the root account, and monitor activity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Q: What is identity federation in AWS IAM?

A

A: Allowing users from external identity providers to access AWS resources using their credentials.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Q: How does IAM integrate with AWS Organizations?

A

A: IAM policies can manage permissions for multiple AWS accounts through AWS Organizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Q: What are Service Control Policies (SCPs)?

A

A: Policies that control AWS service access for accounts in AWS Organizations.

17
Q

Q: What is the AssumeRole API?

A

A: An API call allowing users or services to assume an IAM role and gain temporary credentials.

18
Q

Q: What is the IAM credential report?

A

A: A report listing all users and the status of their credentials for security analysis.

19
Q

Q: What is the IAM Access Analyzer?

A

A: A tool that helps identify resources shared externally and assesses their permissions.

20
Q

Q: What is the difference between an IAM role and an IAM user?

A

A: Users have long-term credentials and are assigned directly, while roles provide temporary access and can be assumed by users, services, or applications.

21
Q

Q: What are the types of IAM policies?

A

A: Managed Policies, Inline Policies, SCPs, and Resource-Based Policies.

22
Q

Q: What are resource-based policies?

A

A: Policies directly attached to AWS resources, such as S3 bucket policies.

23
Q

Q: How does IAM evaluate policies?

A

A: By applying explicit deny, explicit allow, and implicit deny in that order.

24
Q

Q: What are conditions in IAM policies?

A

A: Optional elements to specify when a policy is in effect, based on context keys.

25
Q

Q: What is a principal in IAM?

A

A: An entity (user, role, or service) that can make a request for an AWS action.

26
Q

Q: What are temporary security credentials in IAM?

A

A: Short-lived credentials provided by roles to access resources.

27
Q

Q: What is the AWS IAM Policy Simulator?

A

A: A tool to test and validate the effect of IAM policies before applying them.

28
Q

Q: How is cross-account access implemented in AWS?

A

A: By setting up resource-based policies or using IAM roles that are assumed by accounts.

29
Q

Q: What is AWS STS?

A

A: AWS Security Token Service provides temporary security credentials for access to resources.

30
Q

Q: What are some limits of AWS IAM?

A

A: Limits include 5,000 IAM users per account, 10 managed policies per user, and 1,000 groups per account.

AWS (29 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions