Module 6 - Security Flashcards
Explain the AWS shared responsibility model.
Means that both AWS and the customer is responsible for customers security
- Customers: security in the cloud (e.g., their own content)
- AWS: security of the cloud (e.g., global infrastructure of the cloud, data centers)
What is Amazon IAM? (explain IAM users and IAM role)
Amazon Identity and Access Management
- enables you to manage access to AWS services and resources securely
- gives you the flexibility to configure access based on your company’s specific operational and security needs
IAM users - an identity that you create in AWS - represent the person/application that interacts with AWS services and resources - consists of name and credentials (has no permissions by default)
IAM role - an identity that you can assume to gain temporary access to permissions
What is a Root user?
Owner of an AWS account (no one can restrict you as a Root User) - the root user restricts the other users in a given team/network (think of as owner of a coffee shop)
What is MFA?
Multi-Factor Authentication - e.g., second form of authentication in addition to password to verify your identity
Explain AWS Organisations.
If your company has multiple AWS accounts - you can use AWS Organisations to consolidate and manage multiple AWS accounts within a central location
Explain SCPs.
Service Control Policies - allows you to centrally control permissions for accounts in your organisation (enable you to place restrictions on the AWS services, resources, and individual API actions)
What is AWS Artifact?
A service that provides on-demand access to AWS security and compliance reports and select online agreements - consists of two main sections: AWS Artifact Agreements and AWS Artifact Reports
Explain DoS Attack and DDoS attacks.
DoS - Denial of Service attack - deliberate attempt to make a website or application unavailable to users (e.g., hacker) - attack originates from a single source
DDoS - Distributed Denial of Service attack - attack originates from multiple sources
What is AWS Shield?
A service that protects applications against DDoS attacks. AWS Shield provides two levels of protection: Standard (free) and Advanced (paid)
What is AWS KMS?
Key Management Service - enables you to perform encryption operations through the use of cryptographic keys
What is AWS WAF?
Web Application Firewall - lets you monitor network requests that come into your web applications
- works with Amazon CloudFront and an Application Load Balancer
- uses a Network ACL
What is Amazon GuardDuty?
A service that provides intelligent threat detection for your AWS infrastructure and resources
