Identity and Access Management Flashcards
What does IAM stand for?
Identity and Access Management
What does it mean that IAM is global?
Users and Groups apply to all of your AWS account, they are not bound to a specific region.
In which three ways can you access the AWS Platform?
Via the console
Programmatically (via the command line)
Using a software development kit (SDK)
What is the root account? How should you protect it?
The email address used to set up the AWS account.
Do not give it’s credentials to anyone
Create a user for each individual within the organization.
Secure it using MFA
What is a group?
A place to store your users.
Which users will a groups policies apply to?
All members of that group
How are permissions for groups applied?
Via policies. JSON key-value pairs
What should the root account be used for?
The creation of an administrator account, nothing else.
One user should equal…
One human being
Should you apply policies to individual users?
No
_____ are used to access AWS services.
Roles
When should you use MFA?
Whenever possible
Should password policies be used?
Yes
How can I audit the permissions of users?
Credential Reports
How can I export a list of all users?
Credential Reports
