Module 6: Security Flashcards
What is the Shared Responsibility Model?
The shared responsibility model divides into customer responsibilities (commonly referred to as “security in the cloud”) and AWS responsibilities (commonly referred to as “security of the cloud”)
What are some examples of Customer Responsibilities in the Shared Responsibility Model?
- Instance Operating System
- Applications
- Security Groups
- Host-based Firewalls
- Account Management
What are some examples of AWS Responsibilities in the Shared Responsibility Model?
- Physical Security of data centers
- Hardware and software infrastructure
- Network infrastructure
- Virtualisation infrastructure
What does AWS Identity and Access Management (IAM) allow?
AWS Identity and Access Management (IAM) allows you to manage access to AWS services and resources securely.
What is the difference between Root Users and IAM Users?
Root users have complete access to all of the AWS services and resources within the AWS account whereas IAM Users represent the person or application that interacts with AWS services and resources
What is a IAM Policy?
An IAM policy is a document that allows or denies permissions to AWS services and resources
What is a IAM Group?
An IAM group is a collection of IAM users. When you assign an IAM policy to a group, all users in the group are granted permissions specified by the policy.
What is a IAM Role?
An IAM role is an identity that you can assume to gain temporary access to permissions.
What is an AWS Organization?
AWS Organizations helps you consolidate and manage multiple AWS accounts within a central location. When you create an organization, AWS Organizations automatically creates a root, which is the parent container for all the accounts in your organization.
What are Service Control Policies?
SCPs help you place restrictions on the AWS services, resources, and individual API actions that the users and roles in each account can access.
What do Organisational Units enable?
Organizational Units enable users to easily isolate workloads or applications that have specific security requirements. For instance, if your company has accounts that can access only the AWS services that meet certain regulatory requirements, you can put these accounts into one OU.
What is AWS Artifact?
AWS Artifact is a service that provides on-demand access to AWS security and compliance reports and select online agreements
What is AWS Artifact Agreements?
AWS Artifact Agreements is a service where you can review, accept, and manage agreements for an individual account and for all your accounts in AWS Organizations
What is AWS Artifact Reports?
AWS Artifact Reports is a service that provides
compliance reports from third-party auditors.
What is Customer Compliance Center?
The Customer Compliance Center contains resources to help you learn more about AWS compliance. In the Customer Compliance Center, you can read customer compliance stories to discover how companies in regulated industries have solved various compliance,
governance, and audit challenges.
