Introduction to Security and Architecture on AWS Flashcards
What service controls access to AWS resources
AWS IAM
What service is a managed service that enables you to handle authentication and aspects of authorization for your custom web and mobile applications through AWS?
Amazon Cognito
What are the three AWS IAM Identities?
Users, Groups, and Roles
What are AWS IAM Users?
An account for a single individual to access an AWS resource
What are AWS IAM Groups?
Allow you to manage permissions for a group of IAM users
What are AWS IAM Roles
Enables a user or AWS service to assume permissions for a task
What is the practice of assigning the bare minimum permissions to a user to perform their tasks?
Least Privilege Access
What defines both what services an IAM Identity can access and what actions can be taken on those services?
Policies in AWS IAM
What format is an AWS Policy?
JSON
What is a process through which identities can be imported through SAML providers including active directory?
Identity Federation
What is the process that allows a user to log in?
Authentication
What is the process that determines what a user is allowed to do once they’re logged in?
Authorization
What is the service that provides compliance packs for standards?
AWS Config
What is the service that provides self-service access to reports?
AWS Artifact
What is the service that provides intelligent threat detection?
AWS GuardDuty
What is the compliance standards for processing credit cards?
PCI-DSS
What is the compliance standard for healthcare data?f
HIPAA
What are third party reviews for operational processes?
SOC1, SOC2, SOC3
What are the standards for US government data handling?
FedRAMP
What are the standards for handling personally identifiable info?
ISO 27018
What is being able to support failure of components within your architecture?
Fault tolerance
What is keeping your entire solution running in the expected manner despite issues that may occur?
High availability
Which services enable fault tolerance in your custom applications?
SQS, Route 53
What is the collection of best practices across five key pillars for how to best create systems that create business value on AWS?
Well-architected Framework
What are the five pillars of the Well-architected framework
Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization
What is the model in which security and compliance are shared between AWS and the customer?
Shared Responsibility Model
What is AWS responsible for in the Shared Responsibility Model?
Access & Training for Amazon Employees, Global data centers and underlying network, hardware for global infrastructure, configuration management for infrastructure, patching cloud infrastructure and services
What is the customer responsible for in the Shared Responsibility Model?
Individual access to cloud resources and training, data security and encryption (in transit and at rest), operating system, network, firewall configuration, all code deployed onto cloud infrastructure, patching guest operating systems and custom applications.
Should you use your root account as your day-to-day account?
NOOOOOOOOOoooooo
